Phone security for iPhone and Android
Your phone holds your email, bank, photos and 2FA codes. The settings that matter on iPhone and Android, plus what to do before a phone is lost or stolen.
Why your phone is your most important device
For most people the phone is the key to everything: it receives verification codes, stores passwords and passkeys, opens banking apps and holds years of photos and messages. Protecting it well protects every account at once.
The essentials (both platforms)
- Use a strong screen lock. A six-digit PIN at minimum, ideally an alphanumeric passcode, plus Face ID or fingerprint for convenience. Avoid simple patterns and birthdays.
- Turn on automatic updates for the operating system and apps. Updates fix security flaws that are actively exploited. See software updates.
- Turn on Find My (iPhone) or Find My Device (Android), so you can locate, lock or erase a lost phone.
- Install apps only from the App Store or Google Play, and check the developer and reviews before installing.
- Review app permissions for location, microphone, camera, contacts and photos. Grant "only while using" or "ask every time" where possible.
- Hide notification content on the lock screen, so 2FA codes and messages are not visible to someone holding your phone.
- Add a SIM PIN and ask your carrier for a port-out PIN to defend against SIM swapping.
- Back up automatically to iCloud or Google so a lost phone does not mean lost memories.
iPhone settings worth knowing
| Setting | Where | What it does |
|---|---|---|
| Stolen Device Protection | Settings > Face ID & Passcode | Requires Face ID, not just the passcode, for sensitive changes when away from familiar locations |
| Safety Check | Settings > Privacy & Security | Reviews and resets who you share location and access with |
| Lockdown Mode | Settings > Privacy & Security | Extreme protection for people who may be targeted by sophisticated spyware |
| Advanced Data Protection | Settings > your name > iCloud | End-to-end encryption for most iCloud data |
| Passwords app | Built in | Stores passwords and passkeys, warns about breached ones |
Android settings worth knowing
| Setting | Where (varies by maker) | What it does |
|---|---|---|
| Google Play Protect | Play Store > profile > Play Protect | Scans apps for harmful behavior |
| Theft protection | Settings > Google > Theft protection | Locks the screen if the phone is snatched or taken offline |
| Install unknown apps | Settings > Apps > Special access | Keep this off for every app |
| Advanced Protection | Google account | Strongest Google account security for high-risk users |
| Private DNS | Settings > Network | Can point to a filtering DNS service |
Settings menus differ between Samsung, Google Pixel and other manufacturers, so search the Settings app if you cannot find an item.
Signs of spyware or stalkerware
Battery draining unusually fast, the phone running hot when idle, unknown apps with device administrator rights, or someone knowing things they should not. If you suspect someone is monitoring you, especially a partner or ex-partner, be careful: removing the app may alert them. Organizations such as the Coalition Against Stalkerware and national domestic-abuse hotlines can help you plan safely.
Before your phone is ever lost: make sure you know your Apple ID or Google password, have 2FA backup codes saved somewhere other than the phone, and confirm backups are working.
If your phone is lost or stolen
- Use Find My / Find My Device from another device to locate, lock and display a message.
- If it is stolen, mark it as lost and erase it once you are sure it is not coming back.
- Call your carrier to suspend the line and block the SIM.
- Change your main email and Apple/Google passwords and remove the device from trusted devices.
- Report it to the police if stolen; you may need the report for insurance.
