Set Up a Phone to Be Recoverable

After a phone is gone, your options are limited to what was already switched on. The preparation is quick and almost nobody does it until after the first loss.

Before anything happens

Enable device location tracking.

On Android, Find My Device is on by default with a Google account, but verify it: Settings, Security, Find My Device. Recent versions can locate a device even when offline, through a network of other Android devices, and can report a location for a while after the phone is switched off.

On iOS, Settings, your name, Find My, and enable Find My iPhone, Find My network and Send Last Location.

Set a screen lock that is actually secure. A six-digit PIN or a password, not a four-digit code and not a simple pattern. Biometrics on top for convenience.

Turn off lock-screen access to sensitive things. Notification content, the notification shade's quick settings, and voice assistant access from the lock screen. A locked phone that shows message content on the lock screen leaks a great deal, including one-time codes.

Note your IMEI. Dial *#06# and record it somewhere else. Police and carriers ask for it, and it is the number that lets a carrier blacklist the handset.

Set up an emergency contact and medical ID on the lock screen. This is the mechanism by which an honest finder returns a phone, and it is separate from any tracking.

Verify your backups. Photos, contacts, messages, and any app whose data you would miss. A phone that is backed up is an expensive inconvenience; one that is not may be a permanent loss.

Store recovery codes for two-factor accounts somewhere other than the phone. This is the single most common serious problem after losing a device: the phone held the authenticator, and every account is now inaccessible.

The moment it goes missing

Locate it first, from another device or a browser. The web interfaces for both platforms show the last known position.

Ring it, even if it was on silent. Both platforms override silent mode. A surprising share of lost phones are in the building.

If it looks recoverable and nearby, wait and watch the location rather than acting. Marking it lost immediately can prompt a thief to switch it off.

If it is clearly gone, mark it as lost. This locks the device, displays a message with a contact number, and on iOS suspends payment cards. On Android, Secure Device does the equivalent.

Do not go to retrieve it yourself from an unfamiliar address. Location accuracy is approximate, and confronting someone over a phone has gone badly for people. Involve the police and give them the location.

Within the first hour

Change the password of the account tied to the phone, from a different device. This is the account that controls remote wipe and everything else.

Sign out of that account on the missing device through the account's device list, once you have finished with the location features you need.

Change passwords for anything the phone was signed in to where a session token could be reused — email, banking, messaging.

Contact your carrier to suspend the SIM. This stops calls and, importantly, stops SMS-based verification codes going to whoever has the phone.

Report to the police and get a reference number. Insurance requires it, and the IMEI report can lead somewhere.

Ask the carrier to blacklist the IMEI, which makes the handset unusable on networks in that country and often beyond.

Erasing remotely

Both platforms allow a remote wipe. Two things to know:

It usually requires the phone to come online. A wiped-when-next-connected instruction sits pending until then.

Wiping typically ends your ability to track it. Do this when you have concluded the phone is not coming back.

Activation lock survives the wipe on both platforms, so the device remains tied to your account and is not usable by someone else — which is why keeping the account intact matters more than wiping quickly.

Afterwards

Do not remove the device from your account until everything is resolved. Removing it releases the activation lock and makes the handset usable by whoever has it.

Watch for phishing. A very common follow-up: a message claiming your device has been found, with a link to sign in to your account. The link is a credential harvester. Legitimate location alerts arrive in the platform's own app, not by SMS with a link.

Review the account's connected devices and app permissions once you have a replacement.

The five-minute version

Location tracking on. Strong lock. Notification content hidden on the lock screen. IMEI recorded elsewhere. Two-factor recovery codes stored off the phone.

Those five cover nearly everything that will matter.

Mistakes people make

Preparing after the loss. Everything that helps has to be switched on beforehand.

Leaving notification content visible on the lock screen. A locked phone that displays message previews leaks one-time verification codes to anyone holding it.

Going to retrieve it in person. Location accuracy is approximate and confronting someone over a phone has gone badly for people. Give the location to the police.

Wiping immediately. A remote wipe usually ends your ability to track it, and activation lock already prevents someone else using the device.

Removing the device from your account. That releases the activation lock and makes the handset usable by whoever has it.

Clicking a "your device has been found" link. This is a standard phishing follow-up. Legitimate alerts appear in the platform's own app.

The short answer

Location tracking on, a six-digit PIN or better, notification content hidden on the lock screen, the IMEI recorded elsewhere, and two-factor recovery codes stored off the phone. Those five determine how bad the day is.