Prepare while the device is still in your hands
Phones, laptops, and tablets get left in taxis, taken from cars, and lost in bags. Most of the damage from a missing device comes from two questions: can someone read what is on it, and can you still do your work without it? Both are far easier to answer if you prepared beforehand. After the loss, you are stressed and short of time, and some options, such as remote lock, only work if they were enabled in advance.
Make the device hard to read
The goal is that a finder or thief gets a locked, unreadable piece of hardware.
- Use a strong screen lock. A long passcode or password is better than a short PIN or simple pattern. Biometric unlock is convenient, but keep a solid fallback passcode.
- Turn on full-device encryption. Many modern phones and laptops offer it, and some enable it by default. Encryption means the stored data is scrambled without the right credentials. Everyday encryption explains what that does and does not guarantee, including why the strength of your password still matters.
- Set a short auto-lock time so an unattended device locks quickly.
- Limit what shows on a locked screen. Notification previews can reveal messages and verification codes to anyone holding the device.
- Protect the firmware or startup settings on laptops where the option exists, so someone cannot easily bypass the login.
Turn on remote tools in advance
Most major device platforms include a way to locate, lock, or erase a device remotely, usually tied to an account you control. It generally only works if the setting is enabled and the device is online. Check these before you need them:
- Is the locate feature turned on, and which account controls it?
- Can you sign in to that account from another device, and do you remember the password? Store recovery details in a password manager, and keep two-factor authentication working, since the codes may be sent to the very phone that is missing.
- Can you display a message with a contact number on the lock screen?
- Do you know how to start a remote wipe, and what it does? Wiping usually removes your data permanently, and a wiped device may no longer be trackable. Some people try to locate first and wipe only if recovery looks unlikely.
For a team, it can be worth using a central management arrangement that lets an administrator lock or wipe company data on a device. Such arrangements range from simple to complex and raise privacy questions for personal devices, so teams should decide openly what the organization can see and do. Clear device boundaries between work and personal use make those decisions easier.
Keep your data somewhere else too
A remote wipe is much easier to accept if you know nothing is lost with it. If the only copy of important files is on the missing laptop, you face an awful choice between protecting privacy and keeping the work. A regular backup removes that dilemma. Backup basics describe how to set one up; the main idea here is that it should be automatic and include phones and tablets as well as computers.
It also helps to keep work in places where it can be reached from a replacement device, and to know which accounts are signed in on the device you might lose.
Know what is signed in
A device that is still logged in to email, chat, storage, and business tools is effectively a set of open doors. List them in advance, so you can work through them quickly:
- Email and calendar.
- File storage and document tools.
- Team chat and project tools.
- Customer, billing, and financial systems.
- Password manager and authenticator apps.
- Saved browser sessions and stored passwords.
Many services let you see signed-in devices and sign out a specific one remotely. Changing a password often ends other sessions as well, but not always, so check how each service behaves.
A simple response plan
Write a short plan, keep a copy outside the device, and make sure teammates know where to find it. A typical sequence:
- Try to confirm it is really lost. Call it, check last known locations, and ask people nearby.
- Use the locate and lock tools, and display a contact message if available.
- Report it right away to your manager, administrator, or whoever handles such issues, so others can act. Delay is the most common mistake.
- Change passwords and end sessions for important accounts, starting with email, since it can be used to reset the others.
- Decide whether to wipe. Weigh how sensitive the data is, whether it is encrypted, and how likely recovery is. If it held regulated or customer data, ask about reporting duties, which vary by place and situation.
- Notify others where appropriate, such as your phone carrier, who may be able to suspend service, and the police for theft if that suits your circumstances.
- Replace the device and restore from backup, then record what happened and what could be improved.
If the loss might expose customer data, the guidance on handling customer data responsibly and on a simple incident checklist applies as well.
Do not forget the small stuff
Keep a record of device serial numbers, since they can help with insurance or police reports. Consider what an attacker could do with a stolen phone number, and ask your carrier about extra account protection. Treat unexpected messages after a loss, such as a note claiming your device was found and asking you to log in, with suspicion, since these are a known trick related to phishing emails.
Nothing here guarantees safety, but a locked, encrypted, backed-up device with enabled remote tools turns a likely disaster into an inconvenience.