Lost or Stolen Device: What to Do Immediately to Protect Your Data

Do This Immediately

The first 30 minutes after realizing a device is lost or stolen are the most important. Act quickly across these four areas — and do them from a different device:

Windows — Find My Device

Windows 10 and 11 have a built-in Find My Device feature, but it must be enabled before the device is lost:

1. From another device, sign in to account.microsoft.com/devices.
2. Find your device in the list → click "Find my device."
3. Microsoft shows the last known location on a map — accurate to within a few hundred meters for home Wi-Fi, less for mobile networks.
4. Click "Lock" to lock the device and display a custom message (include a phone number for honest finders).

Windows doesn't offer a remote wipe through Find My Device — for data security on a Windows laptop, BitLocker disk encryption is what protects your data if the drive is removed from the machine.

Mac — Find My

1. From iCloud.com or another Apple device: open Find My.
2. Select your Mac from the device list. If it's online, you see its location.
3. Mark as Lost: Locks the Mac with a passcode and displays a custom message. This also prevents anyone from using Apple Pay on the device.
4. Erase This Mac: Wipes all data remotely. Once erased, the Mac can no longer be tracked — only do this if recovery is not expected and the data risk outweighs recovery chances.

Note: Find My on Mac requires the feature to have been enabled in System Settings → Apple ID → iCloud → Find My Mac. If it wasn't turned on before the loss, remote access isn't available.

iPhone and Android

iPhone

iCloud.com → Find My → select your iPhone → Lost Mode (locks the phone, shows a message, tracks location continuously) or Erase iPhone. With Activation Lock enabled, a thief cannot wipe and reuse the phone without your Apple ID credentials.

Android

Find My Device at android.com/find → sign in with your Google account → locate, lock with a PIN and message, or erase all data. Google's Find My Device also shows battery percentage, which helps gauge how long you have to act before the device goes dark.

Securing Your Accounts After Loss

A lost or stolen device may have active browser sessions, saved passwords, and authentication apps. Protect your accounts immediately:

1. Change your email password — email is the recovery route for every other account. This is the highest priority.
2. Sign out all browser sessions: In Google: myaccount.google.com → Security → Your Devices. In Microsoft: account.microsoft.com → Security. Sign out from the lost device specifically.
3. Revoke app permissions: Check each major account for "connected devices" or "active sessions" and remove the stolen device.
4. Review financial accounts: If banking apps were installed, notify your bank that the device was stolen and temporarily block mobile access if concerned.
5. Change 2FA setup: If your phone was the 2FA device and it's stolen, update your 2FA method to a new device before the old phone's SIM is potentially ported.

Prepare Before Loss Happens

• Enable Find My / Find My Device on all devices before they're lost
• Enable disk encryption: BitLocker on Windows, FileVault on Mac — protects data if the drive is physically removed
• Use a strong screen lock on all devices — a 4-digit PIN is easily bypassed; use a 6-digit PIN, alphanumeric password, or biometric
• Note serial numbers: Write down the serial number of each device (Settings → About or the label on the bottom). Required for police reports and insurance claims
• Back up regularly: If you have to remote wipe, you need a backup to restore from — see our backup guide