Overview
- In the iOS 26.4 developer beta, Stolen Device Protection is enabled for all iPhones by default, with the option to disable it subject to delay rules outside trusted places.
- Sensitive actions such as viewing iCloud Keychain passwords, accessing Apple Card virtual numbers, turning off Lost Mode, erasing the device, certain Wallet transactions, Safari saved payments, and setting up a new device require Face ID or Touch ID with no passcode fallback.
- When away from learned trusted locations, changing Apple ID security settings, the device passcode or biometrics, or turning off Find My or the protection itself triggers a one-hour wait and a second biometric scan.
- The protection was introduced in 2023 after thefts in which criminals learned a victim’s passcode to hijack accounts and disable safeguards.
- The change is live for developers now, with a public beta expected soon and a broader release planned for spring.