A stolen iPhone is rarely just a stolen iPhone. It is a stolen authenticator, a stolen mailbox, and frequently a stolen route into everything those two unlock. Which is why what happens in the first sixty seconds matters more than anything you do afterwards.
Watch how a competent thief behaves and the pattern is consistent. Before they walk away, they swipe down from the lock screen and turn on Airplane Mode.
Why that is the first move
Airplane Mode cuts the phone off the network instantly. From that moment the device stops reporting its location, stops receiving remote lock commands, and cannot be wiped. Your Find My map shows the last place it was seen and nothing after it.
It usually takes a few seconds and requires no passcode at all, because Control Centre is available from the lock screen by default. The phone is then powered off or handed on, and by the time you have found another device to log in from, there is nothing left to command.
The fix takes about twenty seconds
Turning off lock-screen access to Control Centre removes that first move entirely. The thief cannot disable connectivity without unlocking the phone, which means your window to locate, lock or wipe it stays open.
- Open Settings, then Face ID & Passcode (or Touch ID & Passcode)
- Enter your passcode
- Scroll down to Allow Access When Locked
- Turn off Control Centre
That is it. Control Centre still works normally once the phone is unlocked — unlock with Face ID and swipe as usual. In daily use you will barely notice the difference, which is what makes this worth doing where most security advice is not.
While you are in that screen, the same list lets you turn off lock-screen access to Siri, Notification Centre and Reply with Message. Siri in particular is worth switching off: it will answer questions about the device and read out details to whoever is holding it.
Two settings that are worth pairing with it
Stolen Device Protection. Recent versions of iOS add a security delay and a second biometric check before sensitive changes — such as altering your Apple Account password — can be made away from a location the phone recognises. It is specifically designed for the case where someone has both your handset and your passcode, which is the scenario that turns a theft into an account takeover.
Send Last Location. Inside Find My, this makes the phone transmit its position one last time as the battery runs out. It costs nothing and occasionally makes all the difference.
Phone theft readiness
Five minutes of setup now, against a very bad afternoon later. Tick what is already true of your phone.
A brief word on Android
Android handles this differently. Provided you have a PIN, pattern or biometric lock set, the equivalent exposure is much smaller — the quick settings panel restricts the more damaging toggles behind authentication. Setting a proper screen lock remains the thing that matters.
If these are company phones
Everything above is per-device and depends on each person having done it. At any scale that is not a plan, it is a hope.
Mobile device management lets you apply these settings across every handset centrally, confirm they are still applied, and wipe a device without needing the person who lost it to remember their Apple Account password while standing on a station platform. For businesses handling client data on phones, it is generally the difference between a lost handset and a reportable incident.
The takeaway
Disabling Control Centre on the lock screen is a rare piece of security advice that costs nothing, inconveniences nobody, and removes a thief’s most effective opening move. Do it on your own phone now, then think about how you would apply it to everyone else’s.
If that second part sounds like more work than you want to take on, it is exactly the sort of thing that comes as standard with managed device cover — and we are happy to talk it through.
