Phones are a frequent target for thieves. They sneakily look for phones peeking out of pockets or left unattended on café tables. To help tackle such a common problem, many phone developers have added built-in security measures that protect your data if your phone ends up lost or stolen. One of these features is the iPhone's security delay. Let’s learn how it works, why it needs your location data, and what alternative tools you can use to protect personal information on your iPhone.
Contents:
Key takeaways:
The iPhone security delay is a one-hour waiting period that blocks sensitive actions, like changing your Apple Account password or turning off Find My, when your device is outside of a familiar location.
Apple introduced Stolen Device Protection as a security measure against device theft. It can help fend off shoulder-surfing thieves who watch you type your passcode then steal the phone and lock you out of your iCloud before you can react.
To disable the feature, open your device’s settings settings, tap “Face ID and passcode,” enter your passcode, select “Stolen device protection,” and toggle it off. If the delay is already running, you must wait out the hour first.
Location services tell your iPhone which places you visit often, so the delay stays dormant at home or work and activates only when someone attempts sensitive changes in an unfamiliar place.
A dedicated password manager like NordPass keeps your credentials outside the Apple ecosystem, so a thief with your passcode cannot access them and you can still sign in from a backup device.
What is the iPhone security delay?
The iPhone security delay is a protective measure available on iOS devices that limits certain device actions for an hour. It was introduced in iOS 17.3 as part of Apple’s Stolen Device Protection feature. It’s triggered if the device is away from a familiar location — one the owner uses their phone at frequently, like their home or workplace — and they try to perform highly sensitive actions, like changing their Apple Account password, disabling biometrics, or switching off Find My. Attempts to turn off Stolen Device Protection can also trigger the security delay.
Once Stolen Device Protection is activated, you need to verify your identity using Face or Touch ID, or wait out until the hour-long timer is up. Then you need to complete an additional authentication step to set your phone back to normal. This prevents criminals from changing your Apple Account details or logging you out and gives you time to use Find My to locate your device.
Why did Apple introduce Stolen Device Protection?
Apple introduced Stolen Device Protection as a countermeasure against shoulder-surfing device theft. Most thieves know that simply stealing an iPhone is useless — owners set up a passcode or Touch ID to unlock it. So instead, they follow iPhone owners around and try to sneak a glance at their device PIN. Once they learn the PIN, they snatch the phone from their victim and unlock it to access their stored passwords and data, change their Apple Account password, and lock the device’s owner out of their iCloud.
The security delay that Stolen Device Protection creates gives the victim time to mark their device as lost and lock down their account. If they’ve connected their bank account to their iPhone, they can temporarily freeze the card. Users can also remotely log out of some or all of their apps, preventing thieves from taking over those accounts as well.
How to turn off security delay on an iPhone
To turn off security delay on your iPhone, you need to toggle off the “Stolen device protection” feature:
Open your device’s settings and select “Face ID and passcode.”
Enter your device’s passcode.
Tap “Stolen device protection.”
Toggle off “Stolen device protection.”
Note: If your device is currently in stolen device protection mode, you need to wait for the one-hour security delay to finish before you can change the settings.
Level up your online security
Store and manage your digital valuables safely
How location services affect the security delay
Apple’s location services track where you take and use your iPhone. It identifies the places where you spend most of your time, like your home and workplace. Following the location services data, your device knows when to trigger a security delay. Familiar territory? The device acts as normal. A town thousands of miles away in a country you’ve never been to while someone tries to open your Apple Account settings? The delay counter starts ticking.
Apple’s Stolen Device Protection is dependent on the device’s location services. In the initial 17.3 release, the security delay would only kick in if the device was away from its familiar location. However, this created a security risk if the device was stolen in the user’s neighborhood or close to their workplace. In the iOS 17.4 update, Apple introduced an “Always” option under “Require security delay,” letting the iPhone enforce the extra security measures regardless of where the device is.
You need to complete specific suspicious actions to trigger the security delay, so it’s hard to do it when you’re using your phone as normal. If you accidentally trigger it and pass the security delay check once the timer ends, you're all clear. However, a criminal who can’t get past your Face or Touch ID will put the device into lockdown mode. Although it’s recommended to keep this feature switched on as a passive protection measure, you can manually turn it off in the settings.
How to keep your passwords safe even if the security delay is off
You might consider switching off your iPhone’s security delay because of the occasional inconvenience it causes. However, that’s a risky move for your online safety posture. Shoulder-surfing thieves aren’t just looking to resell your stolen iPhone. The profit can be a nice boon for them, but they need your passcode so they can disable your Apple Account and Find My services, steal your data, and do a full reset before listing it as a used phone for sale.
If you use Apple’s “Passwords” as your default password manager, losing your device and getting locked out might mean hours spent trying to retrieve your accounts and reset your credentials. To prevent the risk of your passwords getting compromised by a thief, consider storing them outside Apple’s native ecosystem and use a dedicated password manager like NordPass instead.
NordPass offers a secure password vault that’s not tied to your Apple Account. To access it, you need your Nord Account and master password, meaning criminals won’t be able to log in without this information. NordPass also supports multi-factor authentication as an extra protection layer.
If your device is stolen and you need to access your credentials on a backup phone or your laptop, you can do so easily because NordPass keeps your data synced. You can set up an autolock to prevent the app from staying open after a set period of time. Your vault will stay safe as you switch devices or wait for your stolen phone to be retrieved. Ensure your personal data is protected by multiple layers of security with both your iPhone’s built-in Secure Device Protection and NordPass’ password storage.