Android 17 Used Phones: Theft Protection Often Already On
· TR Vertriebs GmbH
With Android 17, theft protection is often already switched on for new and freshly reset phones. What buyers and sellers should check before a handover.
With Android 17, something changes in the used phone market that many buyers have not yet noticed: theft protection is switched on by default on new devices and on devices that have been freshly reset or upgraded. Google announced this change on 12 May 2026. Android 17 has been rolling out on Pixel phones since mid-June 2026; when other models follow is up to each manufacturer.
Two functions are at the core. Remote Lock lets the owner lock a device from a distance. Theft Detection Lock is meant to lock a phone immediately if it is snatched. Both are switched on by default on new Android 17 devices and on devices that have been freshly reset or upgraded. In markets with high demand – Google names Argentina, Chile, Colombia, Mexico, Peru and the United Kingdom among them – the protection also covers all devices running Android 10 or later. Germany is not explicitly named in the announcement.
Mark as lost in Find Hub also gets tougher. Besides the PIN or passcode, a marked device can now be locked with biometric authentication. According to Google, thieves who know the passcode can then neither switch off device tracking nor simply use the phone again. Quick Settings are hidden, and new Wi-Fi and Bluetooth connections are blocked. On supported devices, Android 17 also allows far fewer wrong attempts at the PIN or password and adds longer waiting times between them.
For sellers this has a catch. As long as a phone is still linked to their Google account, they can lock it or mark it as lost through Find Hub, even long after the sale. Anyone handing over a phone should therefore remove it from the account beforehand.
The most important point remains the Google account lock after a reset, technically known as Factory Reset Protection (FRP). According to Google's help page, retrieved in October 2026, a phone that is reset without the owner's permission asks during setup for either the previous screen lock or the sign-in to a Google account that was added to or synced with the device. Guest accounts do not count. The new default setting changes nothing here: it protects the device but does not undo an existing account link.
A second change concerns the IMEI. According to Google's announcement, devices running Android 12 or later can show the IMEI on the lock screen. Google justifies this with device recovery: police, manufacturers and mobile network operators are meant to confirm ownership quickly and return devices. The function can be switched off in the device settings. For a handover it is practical, because the number can be read and compared with the packaging, the SIM tray and the settings menu. Where exactly it appears depends on the manufacturer and interface.
A third building block concerns the software. With Android 17, Google is introducing Android OS verification, initially on Pixel devices. It shows the user whether the device runs an official Android build. According to Google, the reason is modified system versions that are designed to look like genuine software. For used devices from unclear sources, this is worth checking.
What does that mean in practice? Sellers should remove the Google account from the phone before the meeting, take the device off their own account and only then reset it. Buyers should ask to see the set-up screen on the device and pay only once the phone can be set up without an unknown account prompt. Beforehand, they should compare the IMEI with the packaging, the SIM tray and the settings and have it checked. A query of blacklist status and network freedom, however, says nothing about a Google account on the device, so the set-up screen remains the decisive test.
The default setting is no blank cheque and does not replace a check. A freshly set-up phone can still be on a blacklist or tied to a network. Even so, the used market is likely to change: because new phones with active protection will eventually change hands, more used devices with theft protection switched on will be in circulation.
With IMEI Safe you can check the IMEI for blacklist status and network freedom before the meeting. Our article "Find your IMEI number: *#06# and every method on iPhone & Android" explains how to find it. The rest of the Android check is covered in "Inspecting a Used Android Phone: A Compact Pre-Purchase Routine", and our glossary explains FRP.