Thummer

By Michael Harlow · Published November 6, 2026 · About 6 minutes to read

Android Theft Protection Explained: What Each Feature Does

Android's built-in theft protection is free, and for most people it should be the first thing to set up. It's also a set of separate tools with separate limits. Here's what each one does, how to find it, which Android version it needs, and what is still left uncovered.

Where to find it

Menus vary by phone and Android version, and we haven't tested every device.

All of this needs a screen lock. Google says the features aren't supported on Android Go devices, tablets or wearables. If the Theft Detection Lock toggle is grayed out, your phone doesn't support it.

The core features at a glance

Theft Detection Lock

What it does: It uses AI, motion sensors, Wi-Fi and Bluetooth to spot someone grabbing the phone and running, biking or driving away, then locks the screen.

What it doesn't do: Google says it isn't active when the screen is already locked, and it may not trigger on a stable Wi-Fi or Bluetooth connection or after repeated locks. In a 2025 Android Authority test, dozens of simulated grabs failed until Google explained how to trigger it. It didn't fire with the phone idle on the home screen, and the writer noted that a thief grabbing a phone at a closing train door wouldn't need to run. It can err the other way too: users reported locks while sitting on a bus and while jogging (2025). And it returns the phone to the lock screen, so anyone who has seen your PIN can still get in.

Offline Device Lock

What it does: It locks the screen after an unlocked phone loses its connection and stays in use offline for a short time.

What it doesn't do: It isn't instant, the phone has to be unlocked when it loses connection, and it can lock only twice in 24 hours.

Failed Authentication Lock

What it does: It locks the screen after repeated failed attempts, and Google lists it among the features on by default. On Android 16, Google lengthened lockouts, and repeating the same wrong guess no longer counts against you. On supported Android 17 phones, Google says it cut the number of guesses allowed. Samsung's One UI 9 permanently locks the phone after the 13th failed attempt, and only a factory reset restores it.

What it doesn't do: It's aimed at guessing. It doesn't help when someone already knows your code.

Remote Lock

What it does: It locks the screen from android.com/lock, using your phone number and a reCAPTCHA. Google added an optional security question, under Theft protection > Remote Lock > Security question.

What it doesn't do: It needs an active SIM, a verified number, Find Hub and an internet connection, and works twice in 24 hours. An offline phone can't receive the lock until it reconnects. It doesn't erase data; that takes a Find Hub sign-in. And you have to reach another device first.

Identity Check

What it does: Away from your trusted places, your fingerprint or face is required, with no PIN fallback, for actions such as changing your screen lock, a factory reset, turning off Find Hub, and adding or removing a Google Account. Google says it now covers apps that use Android's Biometric Prompt, including third-party banking apps; Android Authority tied that change to Android 16 QPR2. On Samsung's One UI 7, protected changes also start a one-hour Security Delay, and Identity Check needs a Samsung Account.

What it doesn't do: It doesn't lock the phone or close whatever is on screen. A PIN still works for Private space, multi-user mode, payment autofill in apps, and password and payment autofill in Chrome. The app protection depends on each app using Android's Biometric Prompt. You also have to add trusted places yourself.

Supporting features

Is it already on?

Maybe. In May 2026, Google said Remote Lock and Theft Detection Lock would be on by default on new Android 17 phones and on phones freshly reset or upgraded. In markets including Argentina, Chile, Colombia, Mexico, Peru and the UK, it said the protections extend to all devices on Android 10 or higher. In Brazil, Google began turning them on in phases in November 2025 on newly activated or reset phones. Android 17 began rolling out to Pixel phones in June 2026, with other brands on their own timelines. Open the menu and check rather than assume, because Identity Check and the security question still need your setup.

The gap: an unlocked phone in your hand

Look at what sets each tool off: motion, a lost connection, failed guesses, a sensitive setting, or you reaching another device. None watches for the moment your hand loses contact with the phone. Until something locks it, an unlocked phone stays open, which is how thieves get into bank apps.

Theft Detection Lock is the one aimed at the grab itself, and it depends on how the thief moves. We found no published figure for how often it catches a real snatch, or how quickly. The others are strongest afterward: protecting accounts and making the phone harder to reset and sell.

That in-the-hand moment is what apps like Thummer were built for. It works only while your thumb is resting in its bubble, and it does nothing for a phone in a pocket, on a table or in a car mount, which is one more reason to set up the built-ins first. No app can stop a theft, and this one doesn't track or recover phones. It's an extra layer, not a replacement.

Your setup checklist

  1. Set a strong screen lock. Google suggests a PIN of six or more digits.
  2. Open Theft protection and turn on Theft Detection Lock, Offline Device Lock and Remote Lock.
  3. Verify your number for Remote Lock, and remember the address: android.com/lock.
  4. Turn on Identity Check if your phone offers it, and add trusted places.
  5. Install Android and Google Play system updates when they're offered.
  6. Write down your IMEI from Settings > About phone, and keep it somewhere other than the phone.

If the worst happens anyway, here's what to do in the first 10 minutes.

← All articles