My friend Jake got his iPhone stolen outside a bar in Brooklyn last...

outside a bar in Brooklyn last month.
9 minutes later, his Apple ID password
was changed from his own phone.
The detective who helped us file the report
opened his own iPhone
and showed me exactly how they do it.
Jake's Find My showed
last seen at 11:47 PM. Then nothing.
The detective said the first thing
thieves do is swipe down on the lock screen
to turn on Airplane Mode.
Fix:
Settings > Face ID & Passcode
> Allow Access When Locked
> Control Centre OFF
The detective said forensic tools
can try to extract data through the charging port
even when the phone is locked.
Fix:
Settings > Face ID & Passcode
> Scroll down to Accessories
> Turn it OFF
This blocks the port
if the phone has been locked for an hour.
Since 2022, US iPhones have no physical SIM card.
So thieves try to port your number
to intercept your bank codes.
Fix:
Open your carrier app
(T-Mobile, Verizon, AT&T)
and turn on Number Lock or Transfer PIN.
The thief watched Jake type his 4 digit code
at the bar.
They used it to change his Apple ID password.
Fix:
Settings > Face ID & Passcode
> Stolen Device Protection
> Set it to ALWAYS
Now passcode alone
won't be enough to change it.
It will need Face ID + a 1-hour wait.
Jake used his birth year.
A 4 digit code only has 10,000 combinations.
Fix:
Settings > Face ID & Passcode
> Change Passcode > Passcode Options
> Custom Alphanumeric Code
Use letters and numbers
to make it much harder to guess.
Jake's Auto-Lock was set to 5 minutes.
The thief kept the screen awake.
Fix:
Settings > Display & Brightness
> Auto-Lock > 30 Seconds
Give them no time
to play with an unlocked screen.
Jake had Find My turned on,
but his offline tracking was disabled.
Fix:
Settings > Your Name > Find My
> Find My iPhone
> Turn ON Find My Network
and Send Last Location
Your phone will ping other Apple devices
even if it is offline.
Jake's phone had a log
of exactly what time he leaves for work
and when he comes home.
Fix:
Settings > Privacy & Security
> Location Services
> System Services
> Significant Locations
> Clear history and turn it OFF
The last thing they try
is to remove your recovery contact
so you can never get back in.
Fix:
Settings > Your Name
> Sign-In & Security
> Recovery Contacts
> Add someone you trust right now.
because we acted fast,
but the detective said
most people lose everything.
It takes 90 seconds to change these settings.
Bookmark this
and send it to a friend
who still uses 1234 or birth year as code.