Why a Stolen Laptop Is Two Problems, Not One
When a laptop is taken, most people first mourn the machine. Within a day, the bigger worry usually sets in: what was actually on it. Saved passwords, work documents, family photos, banking logins, client records. A thief rarely wants your emails, but a device that boots straight to a logged-in desktop hands over everything without a fight.
The good news is that protecting a laptop is layered, and each layer is quick to set up. Get all four in place and a lost machine becomes an expensive inconvenience rather than a genuine crisis. This is one of the most common areas of cybersecurity we talk customers through at the Putney workshop, and it costs nothing to sort out an afternoon before you need it.
Layer One: Turn On Full-Disk Encryption
Encryption is the single most important step, and both Windows and macOS include it free. Without it, a thief can simply pull your drive out, plug it into another computer and read every file. With it, the drive is unreadable gibberish without your password or recovery key.
- Windows: Look for BitLocker (Pro editions) or Device Encryption (Home editions) under Settings, Privacy & Security. Confirm it says “on”, not just “available”.
- macOS: Turn on FileVault under System Settings, Privacy & Security. On Apple Silicon Macs the drive is protected at hardware level too.
Critically, write down your recovery key and store it somewhere other than the laptop — a password manager or a note kept at home. We regularly see people locked out of their own encrypted drives after a Windows update or a forgotten password, and without that key even we cannot get the data back. Encryption protects you from thieves, but it protects you from nobody’s mistakes, including your own.
Layer Two: Enable Find My and Remote Wipe
Both Apple and Microsoft offer device tracking that also lets you lock or erase a machine remotely.
- Apple: Find My Mac, switched on through your Apple ID settings. You can locate, lock or wipe the Mac from iCloud.com or another Apple device.
- Windows: “Find my device” under Settings, plus Microsoft account sign-in. Tracking is less reliable than Apple’s, so treat it as a bonus rather than a guarantee.
Tracking a stolen laptop yourself is rarely wise — never go door-knocking after a thief. The real value is the remote lock and erase. If recovery looks hopeless, wiping the machine ensures your data cannot be mined even if the encryption is somehow bypassed.
Layer Three: Back Up Before You Ever Need To
Encryption stops others reading your files. It does nothing to bring them back once the laptop is gone. Only a backup does that, and the time to set one up is now, not after the theft.
A simple, reliable approach:
- Cloud sync (OneDrive, iCloud Drive, Google Drive or Dropbox) for documents you change often, so the latest version is always off the device.
- A separate copy — an external drive kept at home, or a proper cloud backup service — for the things that would be devastating to lose, like photo libraries.
The principle worth remembering is the 3-2-1 rule: three copies of anything important, on two types of media, with one kept off-site. If your only copy of ten years of photos lives on the laptop that just vanished, no service on earth can retrieve it. Set this up while you still can.
Layer Four: Physical Security and Sensible Habits
Most laptop thefts are opportunistic — a bag left on a café chair, a car boot, a hot-desk at the office. A few habits cut the risk sharply:
- Never leave a laptop visible in a parked car, even for a moment.
- Use a Kensington lock slot for desktops in shared or public spaces.
- Set the screen to lock automatically after a couple of minutes, and require a password on wake.
- Avoid the auto-login setting that boots straight to your desktop — it undoes much of your encryption’s benefit.
- Keep a note of the make, model and serial number somewhere safe; police and insurers will ask.
What to Do in the First Hour After a Theft
Move quickly and in order:
- Change your critical passwords first — email, banking, and any password manager master password. Do this from your phone before anything else.
- Sign out of active sessions where you can, and enable two-factor authentication if it was not already on.
- Use Find My to lock the device, display a contact message, or remotely wipe it if recovery is unlikely.
- Report it to the police and get a crime reference number for your insurer.
- Notify anyone affected — your employer if work data was on the machine, or clients if you handled their records.
If the Laptop Comes Back, or the Data Does Not
Recovered machines should be treated as compromised until checked — a thief may have installed something in the meantime. And if a device is gone for good but held files you never backed up, all is not lost if you had a second copy anywhere; data recovery from an old drive, a dead backup disk or a partially synced cloud account is often still possible.
If you would like a hand switching on encryption, setting up a backup that actually runs, or locking down a fleet of business laptops, call us on 020 7610 0500, drop into the Putney workshop, or use the contact form. A short cybersecurity review now is a great deal cheaper than a bad week later.
