Apple has made a major security change in iOS 26.4. The company now turns on Stolen Device Protection by default for all users. This move strengthens protection against a growing wave of iPhone theft.
Apple first introduced Stolen Device Protection in 2023. At the time, users had to enable it manually. However, many people never switched it on. Now, Apple automatically activates the feature to better protect user data.
This update comes as reports of thieves stealing iPhones and learning passcodes continue to rise. In some cases, criminals quickly accessed passwords, banking apps, and Apple ID settings. As a result, victims faced serious financial loss.
How Stolen Device Protection Works
When Stolen Device Protection is active, certain actions require biometric authentication only. That means users must use Face ID or Touch ID. The system does not allow a passcode fallback for these sensitive tasks.
For example, users must scan their face or fingerprint to:
- Access saved passwords and passkeys
- View or apply for an Apple Card
- Turn off Lost Mode
- Erase all content and settings
- Use payment methods stored in Safari
- Set up a new device
This change blocks thieves from making major account changes, even if they know the passcode.
Extra Protection With a One-Hour Delay
Apple also adds a one-hour security delay for critical changes made outside trusted locations. Trusted locations include places like home or work.
If someone tries to change an Apple ID password, update security settings, or disable Find My, the system requires a biometric scan. Then, it enforces a one-hour wait. After that, the user must complete another biometric check.
This delay gives victims more time to react if their device is stolen.
Why It Matters
Although Stolen Device Protection cannot stop theft, it limits the damage. Therefore, Apple strongly recommends keeping the feature enabled.
As digital payments and online accounts become more common, security grows more important. With iOS 26.4, Apple takes another step toward protecting users’ data, identity, and finances.
