If your iPhone is stolen: protect your photos and accounts
If your iPhone is stolen, act on the phone and your accounts first. Apple advises marking the device as lost in Find My as quickly as possible, which locks it with the device passcode, then securing your Apple Account and contacting your carrier and the police. A Vault is a second lock for your private items; it does not replace any of this.
First: what Apple says to do
Apple's page "If your iPhone or iPad was stolen" and the companion page on finding a lost device agree on the core steps.
- Mark it as lost. Use the Find My app on another trusted device or a Family Sharing member's device, or sign in at icloud.com/find. Apple says Lost Mode locks the device with the passcode to prevent someone using it or changing your Apple Account.
- Leave your phone number out if it was stolen. Apple warns that a thief might use contact details for social engineering.
- Keep the device in Find My. Apple says removing it removes Activation Lock, which makes it easier for a thief to erase and resell it.
- Know the limits. Lost Mode only works if Find My was on before the loss, and the device appears online only if it is turned on and connected to Wi-Fi or cellular.
- Report it. Apple's guidance covers reporting to local police and your carrier, and considering a remote erase from Find My or iCloud.com/find.
- Secure your Apple Account. Review the account's security and change your Apple Account password.
Apple also warns that it will never contact you to say your device has been found, and that you should never share your passcode, passwords or verification codes with anyone who asks.
Stolen Device Protection
Apple's page "About Stolen Device Protection for iPhone" describes an extra layer for when a thief knows your passcode. It needs iOS 17.3 or later and has to be turned on before the phone is stolen, with Find My on, two-factor authentication, a passcode, and Face ID or Touch ID. Away from familiar places, some actions then require Face ID or Touch ID with no passcode fallback, and critical changes such as changing your Apple Account password or turning the feature off need a wait of about an hour and a second authentication. You turn it on under Settings > Face ID & Passcode, and it may already be on. Apple still recommends marking the device as lost quickly, because the extra safeguards last only for a period of time.
What a thief can reach
Apple's pages say what Lost Mode and Stolen Device Protection restrict. They do not list what appears on a locked screen, which depends on your settings, so it is worth looking at your lock screen today and deciding what you want visible. If a thief learns your passcode, assume the phone is open apart from the protections above.
Where a Vault fits
Your photos, files and documents are on the phone. A Vault keeps some of them behind a second credential that a thief who watched your passcode would not have.
What it adds:
- A pattern or passphrase of its own, separate from the phone passcode.
- Locking as soon as the app is left (the default), and a blank app switcher.
- Slowed guessing: after ten tries in five minutes, each further try waits longer. The Attempt log keeps the times of the last 20 failed tries, which you can read later from inside an unlocked Vault.
- Data that is tied to your phone. A copy of the app's files is useless on any other device.
- Per-item keys; deleting an item destroys its key.
Think about erase and recovery together
If you erase a stolen phone remotely, the Vault goes with it. That is the right trade for private items, but it makes the Export Package your only way back. Make one now, before anything happens, and keep it off the phone, along with the Recovery Phrase on paper. If you have no Export Package, a lost phone means a lost Vault: there is no copy anywhere else, by design. Restoring needs both the file and the phrase.
Where StrongRoom does not help
- It cannot find, lock or erase a stolen phone. That is Find My.
- It does not protect what is outside the Vault: your Photos library, Messages, Mail, saved passwords and accounts.
- It cannot protect you if someone has your pattern or passphrase, for example because they watched you enter it.
- It keeps no copy off the phone, so it cannot return your items.
- It does not hide itself, and a thief can see that the app is installed.
A short plan before it happens
- Turn on Find My and check Stolen Device Protection in Settings.
- Choose a passcode and a Vault credential that differ.
- Make an Export Package and keep it, with the Recovery Phrase on paper, away from the phone.
- Know your carrier's number and your Apple Account password.
Frequently asked questions
What should I do first if my iPhone is stolen?
Mark it as lost in Find My from another device or at icloud.com/find, then secure your Apple Account and contact your carrier and the police, as Apple advises.
Can a thief see my photos?
That depends on whether they can unlock the phone and what is visible on the lock screen. Lost Mode locks the device; a Vault adds a second credential for private items.
Will I get my Vault back after a remote erase?
Only from an Export Package you made earlier, with the Recovery Phrase. StrongRoom has no cloud copy.
Does StrongRoom track the phone?
No. It makes no network connections of its own and cannot locate a device.
Sources
- If your iPhone or iPad was stolen (Apple Support), checked on 2026-10-30.
- How to find your lost iPhone or iPad (Apple Support), checked on 2026-10-30.
- About Stolen Device Protection for iPhone (Apple Support), checked on 2026-10-30.