Stolen Device Protection adds friction to password and Apple Account changes when away from familiar locations. Ensure recovery contacts and trusted phone numbers are current before enabling — lockouts are harder to bypass by design.
What you will achieve
Enable Stolen Device Protection on a supported Mac so sensitive actions — viewing saved passwords, changing Apple Account settings, or disabling Find My — require extra authentication when you are not at home or work, reducing damage if someone steals your unlocked Mac.
1) Requirements
- macOS Sonoma 14.0 or later (extends to newer releases).
- Mac must be a laptop — desktop Macs are not eligible as of current Apple documentation.
- Two-factor authentication enabled on your Apple Account.
- Find My Mac enabled.
- Screen lock password set.
- Significant Locations or trusted location services used so macOS knows “familiar” places.
Apple Silicon and Intel MacBooks both support the feature when software requirements are met — there is no M-chip exclusivity.
2) Enable in System Settings
- Open System Settings → Privacy & Security.
- Scroll to Stolen Device Protection.
- Toggle it on and authenticate.
- Review the explanation of delayed actions away from familiar locations.
3) What it protects
When away from familiar locations, actions such as:
- Viewing or exporting passwords in System Settings.
- Changing Apple Account password or trusted devices.
- Turning off Find My or Stolen Device Protection itself.
…may require Face ID or Touch ID plus a one-hour security delay with additional verification. At familiar locations (typically home/work), standard authentication applies without the delay.
4) Pair with Find My
Confirm System Settings → Apple Account → Find My → Find My Mac is on. Stolen Device Protection complements remote lock and erase — it does not replace them. Enable Lost Mode from iCloud.com if the Mac goes missing.
5) Recovery planning
Set Account Recovery contacts and a Recovery Key if your organisation allows. Without them, delayed actions after theft are intentional — thieves cannot quickly disable protections. Document your Apple Account recovery path before you need it under stress.
6) Limitations
Protection applies when the Mac is logged in and an attacker has physical access. It does not stop data exfiltration from an already-unlocked session if they act before delays trigger. Lock the screen (Control+Command+Q) habitually in public spaces.
7) Managed and shared Macs
MDM may restrict Stolen Device Protection or enforce equivalent policies. Family shared Macs should use separate user accounts — protection is per Apple Account on the device, not per Mac globally.
Verify
Privacy & Security shows Stolen Device Protection enabled; Find My Mac active; test viewing a saved password away from home (or simulate) to confirm extra prompts appear.