Google on Tuesday announced a significant update to its Android theft-protection arsenal, introducing new tools and settings aimed at making stolen smartphones harder for criminals to access and exploit. The updates, detailed on Google’s official security blog, build on Android’s existing protections and add both stronger defenses and more flexible user controls. 

Smartphones carry your most sensitive data, from banking apps to personal photos, and losing your device to theft can quickly escalate into identity and financial fraud. To counter that threat, Google is layering multiple protective features that work before, during and after a theft.

Don’t miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.

At the center of the update is a revamped Failed Authentication Lock. Previously introduced in Android 15, this feature now gets its own toggle in Android 16 settings, letting you decide whether your phone should automatically lock itself after repeated incorrect PIN or biometric attempts. This gives you more control over how aggressively your phone defends against brute-force guessing without weakening security.

Google is also beefing up biometric security across the platform. A feature called Identity Check, originally rolled out in earlier Android versions, has been broadened to apply to all apps and services that use Android’s Biometric Prompt — the pop-up that asks for your fingerprint or face to confirm it’s really you — including third-party banking apps and password managers. This means that even if a thief somehow bypasses your lock screen, they’ll face an additional biometric barrier before accessing sensitive apps.

On the recovery side, Google improved Remote Lock, a tool that allows you to lock a lost or stolen device from a web browser by entering a verified phone number. The company added an optional security challenge to ensure only the legitimate owner can initiate a remote lock, an important safeguard against misuse.

And finally, in a notable regional rollout, Google said it is now enabling both Theft Detection Lock and Remote Lock by default on new Android device activations in Brazil, a market where phone theft rates are comparatively high. Theft Detection Lock uses on-device AI to detect sudden movements consistent with a snatch-and-run theft, automatically locking the screen to block immediate access to data.

With stolen phones often used to access bank accounts and personal data, Google says these updates are meant to keep a single theft from turning into a much bigger problem.