How to Protect Your Digital Personal Data When Your Phone Is Lost
In the digital services era, losing a mobile phone is no longer just about losing a communication device. A single handset can store access to various critical services, ranging from banking and digital wallets to social media and the Digital Population Identity (IKD).
Therefore, the public needs to immediately take security measures when a phone is lost to prevent personal data from being misused. The Directorate General of Population and Civil Registration (Ditjen Dukcapil) at the Ministry of Home Affairs has shared several steps that can be taken to protect digital identities.
Director General of Dukcapil, Teguh Setyabudi, reminded the public not to focus solely on finding the lost device, but also to immediately secure all digital access stored within it. “The device can be replaced, but personal identity must remain protected. Therefore, when a handset is lost, do not just focus on finding the device. What is more important is to immediately secure all digital access stored in it,” Teguh said on Monday (27/7/2026).
Teguh also asserted that the public does not need to worry about the security of population data stored in the Dukcapil national database. However, access to various applications on personal devices must still be secured immediately by the owner.
Regarding the security of the IKD, Dukcapil advises users to coordinate with the local Dukcapil office if they need assistance securing application access after a device is lost. According to Teguh, the IKD application has been designed with multiple layers of security so that it cannot be accessed arbitrarily by others. “The IKD is designed with various security layers so that it cannot be accessed arbitrarily by others. However, as a precautionary measure, the public should immediately coordinate with the Dukcapil Office if the device used for IKD is lost or no longer in their possession,” he said.
Director of National Population Data Integration (IDKN), Handayani Ningrum, explained several steps that should be taken immediately after a phone is lost to keep access to various digital services protected. These include: blocking the SIM card through the mobile operator; temporarily blocking mobile banking and digital wallet access; changing the primary email password via another device; logging out of all active sessions on important accounts, such as Google, social media, and e-commerce; using tracking, locking, or remote data wiping features if necessary; and monitoring account mutations and transaction history, then immediately reporting any suspicious activity.
According to Handayani, the sequence of these steps is just as important as the effort to find the lost device because it can reduce the risk of account and personal data misuse.
Dukcapil also urged the public to prepare important information before an emergency occurs. Data that should be recorded and stored in a safe place includes the phone’s IMEI number, the SIM card number, a list of bank and digital wallet call centres, and backup email addresses and passwords. “This information is critically needed within minutes during an emergency, not hours or days. Yet the reality is, almost no one stores it in a place that is easily accessible when the phone is lost,” Handayani said.
Furthermore, the public is advised to use strong PINs and passwords, enable multi-factor authentication, and never share OTP codes with anyone, including those claiming to be officials. Handayani also reminded people not to store photos of identity documents openly in their phone gallery or upload them to social media. If copies of documents must be sent to authorities, they should be sent through official channels and only as necessary.
Ditjen Dukcapil emphasised that digital identity security requires both a secure system and public awareness in safeguarding personal data. By acting quickly when a phone is lost and adopting safe digital habits, the risk of identity misuse can be minimised.