A stolen laptop is more than a financial loss. It can also expose personal information, work files, saved credentials, and access to online accounts.
The best approach is to prepare before anything happens. Use physical security to make your laptop harder to steal, enable tracking and encryption before you need them, keep important data backed up, and know what to do if the device disappears.
For businesses, these precautions are especially important. The Federal Trade Commission recommends encrypting laptops and other devices that contain sensitive information and having employees know what to do when equipment is lost or stolen.
Why laptop theft is a security problem
Laptops are portable, valuable, and often contain information that should not fall into the wrong hands.
Depending on how a laptop is used, a stolen device could provide access to:
- Personal documents and photos
- Business files
- Customer information
- Saved browser sessions
- Email accounts
- Cloud storage
- Work applications
- Password managers
- Financial or other sensitive information
The risk depends heavily on how the device and its accounts are configured. A laptop protected with full-disk encryption, a strong sign-in method, current software, and multi-factor authentication presents a different security situation from an unencrypted device with saved passwords and sensitive files stored locally.
The goal is not only to prevent the laptop from being stolen. It is also to make the data on the laptop difficult to access if theft does occur.
8 ways to protect your laptop from theft
Start with these eight security measures:
- Do not leave your laptop unattended in vulnerable locations.
- Use a physical laptop lock when appropriate.
- Enable device tracking before the laptop is lost.
- Turn on full-disk or device encryption.
- Use a strong sign-in method and multi-factor authentication.
- Keep important files backed up.
- Keep your operating system and applications updated.
- Record your laptop's identifying information.
Let's look at each one.
1. Protect your laptop physically
The simplest way to protect a laptop is to avoid situations where someone can easily take it.
Don't leave your laptop visible in a vehicle
A laptop left in a visible location can make a vehicle an attractive target.
When traveling by car, take the laptop with you whenever possible. If you absolutely must leave it in the vehicle, keep it out of sight and follow the security practices recommended by your organization and local authorities.
Be careful in public spaces
Coffee shops, airports, libraries, hotels, coworking spaces, and other public locations can make it easy to become distracted.
When working away from home or the office:
- Keep your laptop within reach.
- Don't leave it unattended while you step away.
- Keep your bag with you.
- Be aware of your surroundings.
- Avoid leaving your laptop at a hotel luggage area unless appropriate security procedures are in place.
- Follow airline and airport instructions when traveling.
The FTC specifically recommends training employees to protect laptops while traveling and to report lost or stolen equipment immediately.
2. Use a laptop security lock
A physical security cable can make a laptop more difficult to grab from a desk or workstation.
Depending on the laptop, a security lock may attach to a built-in security slot or another compatible mounting point.
When using one:
- Attach it to a sturdy, immovable object.
- Follow the lock manufacturer's installation instructions.
- Make sure the lock is compatible with your laptop.
- Avoid routing the cable where it creates a trip hazard.
- Use a lock whenever your environment and security requirements justify it.
A physical lock is a deterrent, not a guarantee. It should be combined with digital protections such as encryption and device tracking.
3. Enable device tracking before your laptop is lost
Tracking features are useful only if they have been configured before the device goes missing.
Windows: Find My Device
Windows includes Find My Device, which can help locate a lost Windows 10 or Windows 11 PC when the feature is enabled and the device meets Microsoft's requirements.
Microsoft says Find My Device requires the device to be associated with a Microsoft personal account, an administrator account, and location services enabled. You can use the Microsoft account device dashboard to locate the device and remotely lock it.
Set it up before you need it.
Mac: Find My
Apple's Find My network can help locate supported Mac computers. It can also provide options for protecting a lost Mac.
If a Mac is lost or stolen, Apple allows users to remotely erase supported devices through Find My. Apple notes that Activation Lock remains enabled after a remote erase, helping prevent the device from being easily reused by someone else.
What about third-party tracking?
Businesses may use enterprise asset-management or endpoint-security services that provide additional device tracking, management, or recovery capabilities.
For an individual user, however, start with the tracking capabilities already provided by your operating system and device ecosystem before adding another service.
4. Encrypt your laptop
Encryption is one of the most important protections you can enable before a laptop is stolen.
Full-disk or device encryption protects data stored on the laptop by making it unreadable without the appropriate authentication or encryption key.
The FTC recommends considering full-disk encryption for laptops and other mobile devices that connect to business networks because it can protect stored data if the device is lost or stolen.
Windows
Windows PCs may support Device Encryption or BitLocker, depending on the device and Windows edition.
Check your Windows security settings to see which encryption capabilities are available on your PC.
If you use BitLocker, protect your recovery key. Losing access to the recovery key can make it difficult or impossible to recover the encrypted data if Windows requests the key.
Mac
Apple's FileVault provides encryption for Mac startup volumes.
If you use a Mac for sensitive work or personal information, check FileVault settings and follow Apple's recommendations for securely managing recovery information.
Don't forget removable storage
Encryption should not stop with the laptop's internal drive.
USB drives, external hard drives, and other removable media can contain copies of sensitive information. The FTC specifically recommends encrypting portable media that contains sensitive information.
5. Strengthen your accounts
A stolen laptop can create account-security risks even when the device itself is encrypted.
Use:
- A strong device password or PIN
- Multi-factor authentication
- Unique passwords for important accounts
- A password manager where appropriate
- Automatic screen locking
- Biometric authentication when available and appropriate
Multi-factor authentication is particularly important for accounts containing sensitive information because it adds another authentication factor beyond the device or account password.
Lock your screen when you step away
Physical theft is not the only concern.
Someone who can access an unlocked laptop may be able to view files, email, browser sessions, or other information without stealing the device.
Set your laptop to lock automatically after a reasonable period of inactivity and manually lock it whenever you leave it unattended.
6. Back up your important data
A stolen laptop should not mean the loss of irreplaceable files.
Maintain backups of important documents, photos, and other data. Depending on your needs, this could include:
- Cloud backups
- External storage
- Automated computer backups
- Business-managed backup systems
Consider the security of your backups, too. If your laptop contains sensitive information, copies of that information should receive appropriate protection.
The FTC recommends regularly backing up business data as part of a broader cybersecurity strategy.
7. Keep your laptop updated
Security updates can address vulnerabilities in the operating system, drivers, browsers, applications, and other components.
Enable automatic updates where appropriate and regularly install available security updates.
If you're using Windows, also make sure your PC is running a supported version of the operating system. Microsoft ended support for Windows 10 on October 14, 2025, meaning it no longer receives free security fixes through Windows Update.
8. Record your laptop's identifying information
Before your laptop disappears, record information that can help identify it.
Keep a secure record of:
- Manufacturer and model
- Serial number
- Service or asset tag
- Purchase receipt
- Date of purchase
- Warranty information
- Insurance information
You can also photograph the laptop and any distinctive markings.
For a business, maintain this information in an asset-management system so IT and security teams can quickly identify a missing device.
What to do if your laptop is stolen
If your laptop disappears, act quickly. The exact response depends on whether it is a personal or business device, what information it contained, and which security controls were enabled.
Step 1: Don't try to recover it yourself
If tracking software shows the device at an unfamiliar location, don't confront the person who has it.
Provide the location information to law enforcement instead.
Step 2: Try to locate or lock the device
If you previously enabled a supported tracking service, use it to check the device's location and lock it when that option is available.
For Windows, Microsoft provides options to find and remotely lock a supported lost device.
For Apple devices, Find My can provide location and device-protection options, including remote erasure for supported Macs.
Step 3: Report the theft
File a police report and provide:
- Laptop make and model
- Serial number
- Asset tag, if applicable
- Approximate time of theft
- Location
- Tracking information
- Photographs or identifying characteristics
- Any available witness information
Keep a copy of the report for insurance or business records.
Step 4: Notify your employer or IT team
If the laptop belongs to your employer, contact IT or your security team immediately.
Don't wait until you have determined whether the laptop can be recovered.
Your organization's response may include:
- Locking the device
- Revoking access
- Resetting credentials
- Reviewing account activity
- Remotely erasing the device
- Investigating possible data exposure
- Reporting the incident according to company policy
The FTC recommends that employees know what to do when equipment is lost or stolen and that businesses maintain an incident response plan.
Step 5: Secure your accounts
If the laptop may have provided access to your accounts, take steps to protect them.
Prioritize accounts such as:
- Primary email
- Work accounts
- Cloud storage
- Banking and financial services
- Password manager
- Social media
- Other accounts containing sensitive information
Change passwords when appropriate and review active sessions or trusted devices.
If multi-factor authentication is available, make sure it is enabled and that your recovery methods are still secure.
Step 6: Consider remote erasure
Remote erasure can be appropriate when protecting the information on a stolen device is more important than recovering the device.
However, do not erase a device before considering whether the location information could help law enforcement recover it, unless your organization's incident-response procedures require immediate erasure.
Apple notes that a remotely erased Mac can remain protected by Activation Lock.
What if the laptop contains sensitive business information?
A stolen business laptop should be treated as a potential security incident, even when you don't know whether anyone accessed the information.
The appropriate response depends on:
- Whether the device was encrypted
- What information was stored locally
- Whether accounts were signed in
- Whether credentials were saved
- Whether the device was managed by IT
- Whether remote management or erasure was available
- What security policies and legal requirements apply
Your organization's security or privacy team should determine whether additional investigation or notification is required.
The FTC recommends having a breach response plan and moving quickly to secure systems if sensitive information may have been exposed.
Laptop theft prevention checklist
Use this checklist to prepare your laptop before something goes wrong.
Physical protection
- Don't leave your laptop unattended in public.
- Don't leave it visible in a vehicle.
- Use a compatible security lock when appropriate.
- Keep your laptop secure when traveling.
- Store it in a secure location when not in use.
Digital protection
- Enable device or full-disk encryption.
- Set a strong device password or PIN.
- Enable multi-factor authentication.
- Turn on automatic screen locking.
- Enable device tracking.
- Keep your operating system updated.
- Keep applications and security software updated.
Data protection
- Back up important files.
- Protect backup copies.
- Encrypt sensitive removeable storage.
- Avoid storing unnecessary sensitive information locally.
- Keep recovery keys in a secure location.
Recovery preparation
- Record the laptop's serial number.
- Record the model and asset tag.
- Keep your purchase recipt.
- Know how to contact your IT or security team.
- Know how to report the device as lost or stolen.
- Review your insurance coverage.
Frequently asked questions
Can a stolen laptop be tracked?
Sometimes. Tracking depends on whether a supported tracking feature was enabled before the laptop was lost, whether the device can communicate its location, and the capabilities of the operating system or management service. Windows Find My Device and Apple's Find My provide tracking capabilities for supported devices.
Can someone access an encrypted laptop if they steal it?
Encryption makes unauthorized access significantly more difficult, particularly when the device is powered off or otherwise protected by its encryption system. However, encryption is not a guarantee against every type of attack.
A device that was already unlocked when stolen, for example, presents a different risk from one that was powered off and fully encrypted.
Should I erase my stolen laptop remotely?
Remote erasure can help protect sensitive information, but the decision depends on the situation. If the laptop contains sensitive business information, follow your organization's incident-response procedures.
If you're trying to recover the physical device, consider coordinating with law enforcement before erasing it.
Does a laptop lock prevent theft?
A physical laptop lock can act as a deterrent and make opportunistic theft more difficult, but it does not provide complete protection. Combine physical security with encryption, tracking, strong authentication, and backups.
What information should I record about my laptop?
At minimum, record the manufacturer, model, serial number, and any asset or service tag. Keep your purchase documentation and insurance information as well.
Protect the laptop and the information inside it
Laptop security works best when physical and digital protections complement each other.
A security cable can make a laptop harder to steal. Tracking can help locate it. Encryption can protect stored data. Strong authentication can reduce account exposure. Backups can help you recover your files. And a clear response plan can help you act quickly if the laptop disappears.
You don't have to wait for a theft to happen before putting these protections in place.
Secure the laptop. Protect the data. Prepare for recovery.
