How to Protect Your Accounts When an iPhone and Its Passcode Are Stolen

An iPhone stolen while a thief knows the passcode should be treated as a full account-security emergency. Mark the device as lost, change the Apple Account password from another trusted device, suspend cellular service, and update passwords for email, banking, social media, and other accounts containing private data.

Steps

Mark the iPhone as lost in Find My. Lost Mode locks the device, suspends Apple Pay cards, and displays a contact message. Avoid removing the iPhone from Find My because removal disables Activation Lock.
Change the Apple Account password immediately. Use another trusted Apple device or Apple’s account-recovery service. Review the device list, trusted phone numbers, recovery contacts, and unfamiliar sign-in activity.
Contact the mobile carrier. Suspend the SIM or eSIM and request account protection against unauthorized number transfers. Change the carrier account PIN if the thief may know account details.
Secure high-risk accounts. Change passwords for email, banking, payment, cloud-storage, password-manager, and social-media accounts. Enable two-factor authentication with a method not dependent on the stolen iPhone.
Erase the iPhone remotely if recovery is unlikely. Remote erasure protects stored data, but the command requires the iPhone to connect to the internet. Keep the device linked to Find My after erasure.

Common Issues and Fixes

Find My shows the iPhone offline: The device may be powered off, disconnected, or in airplane mode. Activate Lost Mode immediately and keep monitoring the device location.
The thief knows the passcode: Local photos, messages, saved passwords, and account sessions may be exposed. Change sensitive passwords from a separate trusted device.
Apple Account password cannot be changed: A Stolen Device Protection security delay may apply. Follow Apple’s recovery process and use a familiar location when possible.
A verification code goes to the stolen iPhone: Use another trusted number or trusted Apple device. Contact the carrier if the phone number or SIM is compromised.
Banking or payment information may be exposed: Contact financial institutions, freeze affected cards, and review recent transactions for unauthorized activity.

Quick Tips

Report the theft to local law enforcement and record the serial number or IMEI for the report and carrier request.
Do not meet a suspected thief at a map location. Provide location information to law enforcement.
Ignore messages requesting an Apple Account password, passcode, or verification code. Theft-related phishing attempts often imitate Apple.
Review email forwarding rules, account recovery settings, and unfamiliar devices after account access is restored.

What should happen when an iPhone is stolen and the thief knows the passcode?

Change the Apple Account password first, activate Lost Mode, suspend cellular service, and update passwords for accounts with sensitive information. Treat private data as potentially accessible until account sessions are secured.