Skip to content
LatchkeyDaily
Subscribe

Lockdown guide · about 10 minutes

Lock down your iPhone

By The Latchkey Daily Team, EditorsPublished Updated Verified January 16, 2027

What's at risk: Your phone is your bank, your email, your photos and your two-factor codes. A stolen passcode is a stolen life.

Verified against iOS 26, January 2027.

You'll need: your iPhone, your carrier account login.

One account a day

The Deadbolt series runs in the daily brief. Get the next guide tomorrow morning.

Free. Weekday mornings. Includes free access to In Case and Serum, the Latchkey tools. Unsubscribe in one click.

Step by step

  1. Strengthen the passcode. Settings, Face ID & Passcode, Change Passcode, then Passcode Options. Choose a six-digit code or a custom alphanumeric one. Not a birthday, not 123456.
  2. Turn on Stolen Device Protection. Settings, Face ID & Passcode, Stolen Device Protection. Turn it on. It requires Face ID (not the passcode) for sensitive changes when you are away from home, which stops the "shoulder-surfed passcode" theft.
  3. Silence unknown callers. Settings, Apps, Phone, Silence Unknown Callers. Calls from numbers not in your contacts go to voicemail. Real callers leave a message; scammers do not.
  4. Filter unknown senders. Settings, Apps, Messages, Filter Unknown Senders. Texts from unknown numbers land in a separate list with links disabled. Toll and delivery scams lose most of their power here.
  5. Turn on automatic updates. Settings, General, Software Update, Automatic Updates. Turn on everything. Updates close the holes scammers use.
  6. Check Find My. Settings, your name at the top, Find My, Find My iPhone. On, with Send Last Location on.
  7. Lock the SIM with your carrier. Call your carrier or use its app and add an account PIN and a port-out or number lock. This stops SIM swaps, where a scammer moves your number to their phone and receives your codes.
  8. Review what has access. Settings, Privacy & Security. Look at Location Services, Contacts and Photos; remove apps that have no reason to be there.

The most common iPhone theft now is not a pickpocket. It is someone watching you type your passcode in a bar, then taking the phone. With the passcode they can change your Apple ID password, turn off Find My, and open every banking app. Stolen Device Protection was built for exactly that, and most people have never turned it on.

Do this for a parent

  1. Set the passcode to six digits they will remember; write it in their notebook, not on the phone case.
  2. Turn on Silence Unknown Callers and explain that family is in Contacts, so family always gets through.
  3. Add your Apple ID as the Legacy Contact and set up Family Sharing so you can locate the phone.
  4. Set Emergency SOS and Medical ID while you are there.

The whole set, in one afternoon: the Family Setup Kit.

If you get locked out

  1. If the phone is lost, go to icloud.com/find from any device and mark it as lost; that locks it and shows a message.
  2. If you forgot the passcode, you will need to erase the phone from icloud.com/find and restore from backup; make sure iCloud Backup is on today.

Questions people ask

Will Silence Unknown Callers block my doctor's office?
The call goes to voicemail and shows in Recents; they leave a message, you call back. Add the office to Contacts and it rings normally.
Is Face ID safe?
Yes. It is far safer than a passcode because nobody can watch you type it. Stolen Device Protection makes it required for the changes that matter.

Related

  • Guide

    Lock down your Android phone

    Your phone holds your bank, your email and your two-factor codes. A weak screen lock or a sideloaded app hands all of it over.

  • Guide

    Lock down your Gmail account

    Your email is the master key. Anyone inside it can reset the password on your bank, your Amazon and everything else.

  • Guide

    Lock down your bank login

    Online banking is the account scammers are actually after; everything else is a route to it.

  • The scam this stops

    The unpaid toll text scam

    The unpaid toll text scam is a text message claiming you owe a small toll balance and must pay through a link today to avoid a late fee; the link leads to a fake toll-agency page that takes your card number and personal details.

  • The scam this stops

    The package delivery text scam

    The package delivery text scam is a text claiming a package could not be delivered because of a missing address detail or a small redelivery fee, with a link to a fake carrier page that collects your card number and personal details.