Short answer: Spend fifteen minutes on six things — a strong Apple ID password with two-factor authentication, Stolen Device Protection, a screen-time passcode separate from your unlock code, silencing unknown callers, tightening app permissions, and Find My. Together they protect the two things that actually matter in India: your UPI apps and your Apple ID.
1. Secure the Apple ID first
Everything else depends on this. Your Apple ID holds your backups, photos, messages and the ability to locate or erase your devices. It is a far more valuable target than the phone itself.
Use a password you have not used anywhere else, and confirm two-factor authentication is on under Settings → [your name] → Sign-In & Security. Check the trusted phone number listed is one you still control — an old number here is a real vulnerability.
2. Turn on Stolen Device Protection
This is the most useful iOS security feature most people have never enabled, and it exists for exactly the scenario Indian cities produce: someone watches you type your passcode, then takes the phone.
Without it, the passcode alone unlocks your Apple ID password, your saved cards and your device settings. With it, sensitive actions in unfamiliar locations require Face ID or Touch ID — no passcode fallback — and some changes impose an hour's delay before they take effect.
Enable it under Settings → Face ID & Passcode → Stolen Device Protection. Available on iPhone XS and later running a recent iOS version.
3. Use a longer passcode
Six digits is the default and it is guessable if someone watches you enter it once. Change it to alphanumeric under Settings → Face ID & Passcode → Change Passcode → Passcode Options → Custom Alphanumeric Code.
You will rarely type it if Face ID is working, so the daily cost is close to zero.
4. Lock down UPI and banking apps
This matters more in India than almost anywhere else, because your phone is your payment method.
Set every payment app to require biometric authentication on open, not just at transaction. Keep transaction limits low enough that a compromised app cannot empty an account. And turn off message previews on the lock screen — a phone lying face up on a desk otherwise displays OTPs to anyone walking past.
Do that under Settings → Notifications → Show Previews → When Unlocked.
5. Silence unknown callers
Spam and fraud calls are relentless in India. Settings → Apps → Phone → Silence Unknown Callers sends calls from numbers not in your contacts, recent outgoing calls or Siri suggestions straight to voicemail.
The trade-off is real — delivery agents, cab drivers and hospitals call from unknown numbers. They still appear in your recent calls and voicemail, so nothing is lost, but you will need to check. Many people prefer it on during work hours and off when expecting a delivery.
6. Audit app permissions
Go through Settings → Privacy & Security and look at Location Services, Contacts, Photos and Microphone.
Most apps asking for Always location need only While Using. Very few genuinely need your full contacts list. For Photos, prefer Limited Access and select specific images rather than granting the whole library — this one is worth doing carefully, since a photo library often contains images of documents and cards.
7. Set up Find My properly
Under Settings → [your name] → Find My, enable Find My iPhone, Find My network and Send Last Location. The last of those transmits the phone's position just before the battery dies, which is frequently the only useful location you get.
If a device is lost, report it to the police and block the IMEI through the government's CEIR service — see IMEI check India. Filing the complaint first matters, because the blocking process requires it.
The fifteen-minute checklist
| Setting | Where |
|---|---|
| Two-factor authentication | Apple ID → Sign-In & Security |
| Stolen Device Protection | Face ID & Passcode |
| Alphanumeric passcode | Face ID & Passcode |
| Previews when unlocked only | Notifications |
| Silence unknown callers | Apps → Phone |
| Location & photo permissions | Privacy & Security |
| Find My + Send Last Location | Apple ID → Find My |
If you have just bought a renewed phone
Before any of the above, confirm the device is genuinely yours: it should not ask for anyone else's Apple ID, and the IMEI should verify clean. Both are covered in the 9-step checklist.
Every Premium Renewed iPhone ships fully erased with a verified clean IMEI, 100% battery health and an 18-month warranty.
Frequently asked questions
What is Stolen Device Protection on iPhone?
A setting that requires Face ID or Touch ID, without a passcode fallback, for sensitive actions when the phone is in an unfamiliar location, and imposes a delay on some changes. It protects against someone who has both your phone and your passcode.
How do I stop spam calls on iPhone in India?
Enable Silence Unknown Callers under Settings, Apps, Phone. Calls from numbers not in your contacts go to voicemail and still appear in recent calls, so nothing is permanently missed.
How do I hide OTPs from my lock screen?
Set Settings, Notifications, Show Previews to When Unlocked. Message content, including one-time passwords, then stays hidden until the phone is unlocked.
Is a six-digit passcode secure enough?
It is guessable if someone observes you entering it. An alphanumeric passcode is significantly stronger and rarely typed when Face ID is working.
What should I do if my iPhone is stolen in India?
Use Find My to mark it lost, file a police complaint, then block the IMEI through the government's CEIR service on Sanchar Saathi. The complaint is normally required before blocking.
