Your phone is often the key to everything: email, banking, authenticator codes and saved passwords. This guide covers the settings that matter. It is part of our guide to securing your key accounts.
Why your phone needs real protection
An unlocked phone can give a thief your inbox, your text messages and possibly your password manager. Phone thieves sometimes watch you type your passcode before stealing the phone, then use it to change your account passwords.
Set a stronger passcode
| Lock type | Combinations | Verdict |
|---|---|---|
| 4 digits | 10,000 | Too weak |
| 6 digits | 1,000,000 | Minimum |
| 8+ digits, or letters and numbers | Far more | Best |
| Pattern | Often guessable | Avoid |
Avoid birthdays and repeated digits. Pair your code with fingerprint or face unlock, so that you rarely type it in public.
Add a SIM PIN
Open your phone's SIM or mobile settings and turn on the SIM PIN. Find your SIM's default PIN from your provider first, because too many wrong tries will lock the SIM.
Also ask your provider about a separate account PIN or port-out protection, which helps against SIM swap attacks.
Turn on remote lock and erase
- iPhone: turn on Find My, and consider Stolen Device Protection.
- Android: turn on Find Hub, and consider theft protection features.
Know how to use them before you need them, and remember your Apple or Google password. See what to do if you lose your phone.
Lock down what shows on your screen
- Hide message previews on the lock screen, so that login codes are not visible.
- Set the screen to lock after a short delay.
- Turn off access to wallets and settings from the lock screen, where you can.
Keep it updated
Install system and app updates promptly. Use only official app stores, and be careful with app permissions. Read about password-stealing malware.
Protect your accounts on the phone
- Add a separate PIN or biometric lock to your banking, password manager and authenticator apps.
- Keep backup codes off the phone.
- Do not store recovery phrases in photos or notes. See storing a seed phrase digitally.