Android's new 'Mark as lost' finally made me trust phone-theft protection

I've never really trusted phone theft protection.

Theft Detection Lock catches a snatch, Offline Device Lock kicks in when a thief takes the phone offline, and Remote Lock lets you lock it from a browser. But all three still relied on one thing.

The PIN had to prove that the person holding the phone was me.

If someone else knows the PIN, one Lock Screen was never going to stop them. I've felt that way for years, even with all the anti-theft features Google added.

I used to think that Find Hub was more comfortable than useful, especially as more of us had stopped relying on a PIN for anything else.

That changed this year with a small update to Mark as lost in Find Hub. For the first time, I feel like Google is protecting my phone instead of plainly asking me to trust it.

Related

Why I use this little-known Android lock setting before letting anyone borrow my phone

You should use it, too

Posts 6
By  Rahul Naskar

The reason I never trusted 'Mark as lost'

A PIN was never protecting anything when someone already had it

Mark as lost sounds like a solid deterrent, until you think about how most phones are stolen.

I've never had my phone stolen, but this is how it'd go if it happened. Imagine me standing in a coffee shop, unlocking my phone willy-nilly, without any spatial awareness. I enter the same four-digit PIN like I always do, without considering who might be standing behind me.

Someone wouldn't need to guess my code anymore, as they've watched me enter mine on my phone.

At this point, a remote lock wouldn't mean anything. It only checks that someone entered the PIN, not whether the PIN actually belonged to you.

A thief with my PIN or passcode could gain access to my phone and turn off tracking, or sign out of Find Hub. Even worse, they could factory reset my device before I could have even noticed it was gone.

That's one reason I trust my thumb or my face more than a PIN for unlocking.

The problem was never the lock screen; it was that the code alone was enough to beat it.

The fix? Use biometrics, not codes

You can shoulder-surf a PIN, but not the fingerprint

Here's what changed for me. After you activate Mark as lost, getting back inside your phone now requires your face or fingerprint, not just the PIN, even if the thief knows it.

It's not a second step stacked onto the PIN; it replaces it entirely.

A passcode is something you can watch someone enter on your phone. A fingerprint or face isn't something they can watch their way into. It doesn't matter how well they memorized your PIN.

For the first time, marking the phone as lost doesn't just ask a thief to enter the PIN code, which they might already have. It asks for something they can never have.

It doesn't stop at the lock screen

Closing the side door thieves actually use

Android 17 has closed most of the loopholes that could have let a thief access your device.

Biometric-only unlock wouldn't matter as much if a thief could perform a workaround. Good thing Android 17 closes most of those exits.

When you trigger Mark as lost, your device hides Quick Settings and stops your phone from joining any Wi-Fi or Bluetooth networks. That's the kill switch.

It's the same instinct behind turning on those settings the moment you set up a new phone, not after it's gone missing.

It only works if your phone qualifies

Android's fragmentation problem

The feature isn't available for all yet. It ships with Android 17, and Google is still rolling the defaults out region by region, testing them first in Brazil.

Next in line are Argentina, Chile, Colombia, Mexico, and the UK. Plenty of phones are still running Android 16 or older versions and won't get the feature on the same timeline.

My Google Pixel 8 has it, since it's running the latest Android 17 build. A phone stuck on Android 14 or anything below Android 17 won't get this on the same timeline.

It's the same rollout pattern behind Android 17's bigger push to make security calls without asking permission first, a good direction that just takes time to reach everyone.

A protection everyone deserves is currently a protection some people get first.

After years of skepticism, I finally trust the lock screen

The trust had to be earned

My trust has nothing to do with Google selling the feature better. I stopped doubting the feature because someone closed the specific gap I kept pointing out.

A PIN was never the weak link. It was knowing it was enough to gain access to everything.

My phone carries a lot, including banking apps, password managers, and two-factor prompts. Basically, my entire digital life.

For now, it's the first lock on my phone that isn't asking me to take its word for it.