C
Cyrano Security
11 min read
Theft Detection Lock · Android

One Android phone, two theft detection locks, no conflict.

Android 10+ runs a device-side Theft Detection Lock that uses sensor fusion to lock the phone screen when it is snatched. That protects the phone. It does not protect a mailroom, a condenser pad, a loading dock, or a parking lot. A property manager who runs a building from an Android phone needs a second lock, a property-side zone-lock that detects on camera tiles and delivers into the same Android notification shade. Both locks belong on one phone. This guide walks through how they stack, what the property-side payload looks like when it lands, and why Android's Doze mode does not block it.

4.9from 50+ properties
Two independent locks on one Android phone, no conflict
Property-side payload: 480x270 tile crop + zone + dwell + timestamp
Doze mode does not gate delivery (WhatsApp FCM high-priority rail)
Capture to Android notification tray under 60 seconds

Why this search is usually the wrong question

Type the phrase into Google and every top result is the same story. Google shipped an Android feature called Theft Detection Lock, it uses AI-assisted sensor fusion to notice when a phone is grabbed and carried away, and it locks the screen. TechRadar covered it, Android Authority tested it, BGR and Popular Science wrote setup guides, the official Android Help page walks through Settings > Google > All services > Theft protection. Every one of those pages is correct. None of them talk about a large and quiet second audience for the phrase: the property manager or regional operator who holds an Android phone for the same reason an accountant holds a calculator, and who is not protecting the phone but protecting the property.

For that reader, the device-side lock is fine but incomplete. The phone is not the asset they are losing sleep over. What they need is a second lock that rides on the same phone, detects on camera tiles, and delivers through a notification rail Android already trusts. That second lock exists, and this page is about what it actually does when it arrives on an Android phone.

The two locks, side by side

The device-side lock and the property-side lock share exactly one thing: they both end in a notification on an Android phone. Everything else is different. The signals, the capture point, the asset, the failure mode, and the intervention window all change.

Android device-side lock vs. property-side zone lock

Both locks end in the same Android notification tray. Nothing else about them is the same.

FeatureAndroid Theft Detection Lock (device-side)Property-side zone lock (Cyrano)
Asset protectedThe phone itselfMailroom, pad, dock, lot, cage, conex, bike room
Sensor / capture pointPhone accelerometer, Wi-Fi, BluetoothDVR HDMI multiview output, 16-25 tiles in parallel
Inference runs onThe Android phone itselfEdge unit next to the DVR
Signals fusedSnatch motion + getaway + disconnectZone polygon + dwell seconds + armed schedule
What the lock doesLocks the phone screenShips an event (tile thumbnail, zone, dwell, time)
Delivery to Android phoneLocal system service, no delivery neededWhatsApp high-priority FCM, Doze-exempt
Min Android versionAndroid 10+Android 5.1 (anywhere WhatsApp runs)
Intervention windowSub-second (pre-data-access on the phone)30 to 180 seconds (pre-act on the property)
False-positive profileML model tuned to snatch signatures3 filters agree, 50:1 reduction vs. raw motion

How both locks end up on one Android phone

The two capture paths never touch each other. The device-side lock observes motion sensors inside the phone and writes to Android's internal lock service. The property-side lock observes a DVR's HDMI multiview, runs inference on an edge unit, and writes to WhatsApp's high-priority FCM channel. Both paths land in the same Android notification tray. Both can wake the phone. Neither needs to know the other exists.

Two capture paths, one Android phone

Phone accelerometer
DVR HDMI multiview
Zone polygon + schedule
Android notification tray
Screen lock + Find My Device
WhatsApp property ops thread
SMS fallback + webhook

The property-side hub is a Cyrano edge unit, not the phone. The phone is the delivery endpoint only. That separation is why the inference can watch 25 tiles at once without touching the phone's battery, and why the property-side lock works on Android versions too old to run the device-side lock.

What lands on the Android phone

The payload is deliberately small. A tile thumbnail, a zone label, a dwell count, a timestamp, a camera name, a DVR layout id, a latency number. Below is an anonymised payload taken from a real deployment, shaped exactly the way it reaches an Android phone through WhatsApp.

Event payload · arriving on an Android phone via WhatsApp

What changes when the property-side lock is added

Flip between the two states. Before, the property manager's Android phone protects only the phone itself. After, the same phone is the delivery endpoint for the property's zone lock events too.

The staff phone runs Android's Theft Detection Lock. Good if the phone is snatched. Does nothing when someone dwells in the mailroom at 21:07 or when a transformer pad gets a visitor at 02:14. Staff learn about property events the next morning from a resident complaint or a maintenance ticket.

  • Covers the phone in the staff pocket
  • Locks the screen on snatch motion
  • No visibility into camera feeds
  • Property incidents surface hours late

Android delivery paths, ranked

Every Android phone has several rails an incoming property alert could ride. Not all of them survive Doze mode, App Standby, manufacturer battery managers, or the staff's own unread-count discipline. This is why the default is WhatsApp.

WhatsApp (default)

High-priority FCM slot, Doze-exempt, whitelisted by every major OEM (Samsung, Xiaomi, OnePlus, Oppo, Vivo). Same thread the staff already use for vendors and residents. Tile thumbnail renders as the big-picture preview. Fastest read-time.

SMS fallback

Always delivers, but no thumbnail, no rich formatting. Good for redundancy, bad as the primary rail because the staff has to pivot to the camera system to verify.

Email

Reliable but slow on Android. Gmail's notification channel defaults to silent on most Samsung OEM profiles. Alerts that land in email get read in batches, which defeats the pre-action window.

Dedicated app push

Possible, but getting whitelisted across every OEM's battery manager is a constantly moving target. Also adds a second place the manager has to open, which loses to the WhatsApp-is-already-open pattern.

Webhook into PMS / access

Not a notification channel at all. Useful for logging, dashboards, and auto-gating an access system, but does not replace the staff phone alert.

Phone call (escalation)

Reserved for multi-alert escalations or for specific zones (transformer pads, data closets) where the schedule is 24/7. Never the primary rail because call interruption is too heavy for routine events.

The operating constants

These are the numbers the property-side lock actually runs on. None invented, none rounded for copy. They are what the pipeline produces on a 16-camera apartment property.

0Tiles inferred per unit off one DVR HDMI
0 msCapture to Android notification tray
0:1Raw detections to delivered alerts
0 minPhysical install on a running DVR
200 to 3-8

A typical 16-camera apartment property generates more than 200 raw person detections per day from residents, contractors, deliveries, and staff. The same property delivers 3 to 8 Android notifications per day after zone + dwell + time fusion runs. The device-side lock on the same phone never fires, because the staff phone is usually on a desk, not in a snatch. Both locks sit dormant most days. Both matter when they fire.

Cyrano deployment data, Class C multifamily

What the zone-lock rule looks like in config

Three fields describe a zone: the polygon on a specific tile, the dwell threshold, and the armed schedule. A fourth block declares where the event gets delivered, which for an Android staff phone is always a WhatsApp group.

zone-config.yaml

Enabling both locks on one Android phone

Four steps. Two for the device-side lock, two for the property-side. None of them touch each other, and the order does not matter.

Four-step setup, both locks live

1

Step 1. Turn on Android Theft Detection Lock

Android 10 or higher. Open Settings > Google > All services > Theft protection, then enable Theft Detection Lock. This covers the phone itself on snatch + getaway. Also enable Offline Device Lock and Remote Lock from the same screen for layered device-side protection.

2

Step 2. Confirm WhatsApp notifications are high-priority

Open WhatsApp > Settings > Notifications. Confirm Messages notifications are set to High importance and that the Messages channel is exempt from Battery Optimization (Settings > Apps > WhatsApp > Battery > Unrestricted on most OEMs). This is usually already true by default, but a locked-down corporate profile can silently downgrade it.

3

Step 3. Cable the property's HDMI tap

HDMI in from the DVR, HDMI out to the guard monitor, network, power. Under two minutes on a running recorder. The physical tap is downstream of the cameras, so camera brand, firmware, and ONVIF status do not matter.

4

Step 4. Draw the zones and connect the WhatsApp thread

Polygon per tile, dwell threshold per zone, schedule per zone. Register the property's WhatsApp ops group as the delivery target. First zone lock event usually lands on the Android phone the same day, inside the pre-action window.

Where Android-side sensor fusion cannot reach

The device-side lock's signal set is good at exactly one job: catching a phone that has been picked up and moved away. It does not translate to property assets because none of those assets move, and none of them have sensors inside them. These are the failure modes worth naming directly.

Failure modes of a phone-only lock on property assets

  • Transformer pad after hours (pad does not move, accelerometer not applicable)
  • Mailroom package alcove dwell (no snatch signature, just a person standing)
  • Parking lot catalytic converter theft (actor lies motionless under vehicle)
  • Loading dock apron outside shift (person arrives and waits, never a snatch)
  • Conex and tool crib staging (short walks, no getaway pattern)
  • Bike room cage during business hours (pre-attack observation looks identical to legitimate use)

The property-side lock ecosystem around one Android phone

The phone is at the center. The DVR feeds the edge unit, the edge unit feeds WhatsApp, WhatsApp feeds the phone. The ecosystem around that loop is already familiar to property staff because it is the same thread they use for every other piece of building coordination.

Android phone
property ops
DVR / NVR
Edge unit
Zone rules
WhatsApp
FCM high-pri
Tile crop

DVRs the property-side lock works on

Compatibility is at the recorder level, not the phone level. If the recorder has an HDMI port driving a guard monitor, the property-side lock can fire into any Android phone's WhatsApp thread. Non-exhaustive list below.

Hikvision DS-7xxx
Dahua XVR / NVR
Lorex
Amcrest
Reolink NVR
Uniview
Swann
Night Owl
Q-See
ANNKE
EZVIZ
Honeywell Performance
Bosch DIVAR
Panasonic WJ-NX series
Any DVR with HDMI out

One question that separates a real property-side lock from a spec sheet

Ask any vendor selling “AI theft detection with Android alerts”: on a Tuesday afternoon at a 16-camera apartment with 200 residents, how many raw person detections will your model emit, how many alerts will land on the property manager's Android phone, and on which rail? If the ratio is not at least 50 to 1 between raw detections and delivered Android notifications, the fusion layer is not doing its job and the channel gets muted inside a week. If the rail is a dedicated app rather than a channel Android already trusts (like WhatsApp), the channel will get throttled by the OEM battery manager before it gets muted by the user.

0+

Raw person detections per day from residents, deliveries, and staff at a 16-camera apartment.

0 to 0

Delivered Android notifications per day after zone, dwell, and time fusion. The read-able number.

0 ms

Typical capture-to-Android-tray latency on a real deployment. Inside the pre-action window.

See the property-side lock fire on an Android phone.

15-minute demo. HDMI in on a running DVR, zone drawn on a tile, dwell and schedule set, first event into a WhatsApp thread on an Android phone while we are still on the call.

Book a call

Frequently asked questions

Is Android's Theft Detection Lock the same thing property managers need?

No, and that is the whole confusion inside this keyword. Android's Theft Detection Lock is a device-side feature on Android 10 and above that fuses accelerometer motion, Wi-Fi, and Bluetooth signals to notice a snatch-and-run, then locks the phone's screen. It protects the asset in your hand. A property manager also holds an Android phone, but the asset they are trying to protect is a mailroom, a condenser pad, a conex, a loading dock, or a parking lot — none of which have an accelerometer, and none of which get snatched. The device-side lock cannot see any of those. What a property manager actually needs is a second theft detection lock: one that watches camera tiles, fuses zone + dwell + time, and lands the event on the same Android phone via WhatsApp. Both locks are worth running. They cover different assets and they never conflict.

What does the property-side lock event actually look like when it hits an Android phone?

It lands as a single WhatsApp message in the property's ops thread. Message body: a 480 by 270 pixel tile thumbnail (cropped from the exact camera tile on the DVR mosaic), a zone label like 'mail_alcove_after_1900', a dwell counter in seconds, a timestamp inside the armed schedule, the camera name, the DVR layout id, and a latency number — typically around 5,120 milliseconds from capture to delivery. On the Android notification shade, WhatsApp renders the thumbnail as the big-picture preview and the zone label + dwell count as the collapsed text. The whole thing reads in under two seconds while the staff member is walking between units.

Do Android's Doze mode or Battery Optimization drop the property-side lock notification?

No, because WhatsApp holds one of the system FCM high-priority messaging slots on Android. High-priority FCM messages bypass Doze for the wake-up window, the notification posts, and the phone vibrates or rings per the user's channel settings. That is why the default delivery channel is WhatsApp rather than a custom app: building another Android app that is reliably exempt from Doze, App Standby, and manufacturer battery managers (Samsung's Device Care, Xiaomi's MIUI cleaner, OnePlus's auto-sleep) is a never-ending cat-and-mouse. WhatsApp is already whitelisted across every OEM because users would complain if it were not. Ride that rail.

Can the two locks conflict on the same Android phone?

No. They do not touch each other. The device-side lock runs inside Android's system services (under Settings > Google > All services > Theft protection on Android 10+) and only fires on sensor readings from the phone itself. The property-side lock runs on a Cyrano edge unit sitting next to the property's DVR, detects on the DVR's HDMI multiview output, and delivers through WhatsApp. Nothing on the phone makes an inference. Nothing on the edge unit touches the phone's accelerometer. One phone can carry both alerts without interference.

Why not just build a dedicated Android app to deliver property alerts?

Three reasons, all of them operational. First, a dedicated app adds a second place a property manager has to open, and the manager already lives inside WhatsApp (vendors, residents, maintenance, staff are all there). Second, a dedicated app needs to hold background priority across every OEM's power-saver scheme, and getting whitelisted on Samsung, Xiaomi, OPPO, Vivo, and Huawei is a constantly moving target that an infrastructure vendor should not be fighting. Third, the alert has to read in two seconds. A WhatsApp message with a tile thumbnail and a one-line caption reads faster than any app's notification, lockscreen widget, or in-app feed. If the property wants a dashboard too, that is fine, but the default channel is the one that gets read, and on Android that is WhatsApp.

Does the capture pipeline have to live inside the Android phone?

No, and this is where most of the confusion in this keyword comes from. Android's Theft Detection Lock runs inference on the phone (that is the whole point, the phone is both the asset and the sensor). The property-side lock is the opposite: inference runs on a Cyrano edge unit next to the DVR, not on the phone. The phone is the delivery endpoint only. That separation is what lets the pipeline watch 16 to 25 camera tiles in parallel at full framerate without melting a phone battery, and it is also what lets the alert survive even when the staff Android phone is asleep on a desk.

What specifically triggers the property-side lock, if not a phone accelerometer?

Three signals have to agree on the same subject on the same tile in the same second. One: a person enters a drawn polygon on a specific camera tile (for example, the package shelf area on camera 4 of a 4x4 DVR mosaic). Two: their dwell time inside the polygon crosses a per-zone threshold, usually 10 to 20 seconds, which filters residents walking through. Three: the current timestamp is inside that zone's armed schedule (for example, 19:00 to 06:00 for a mailroom after hours). All three filters agreeing is rare (a handful of events per day per property). Any one filter alone is noise (hundreds per day).

What Android versions can receive this WhatsApp-based property lock?

Any Android version that runs WhatsApp, which is Android 5.1 and higher at the time of writing. This is important because the device-side Theft Detection Lock requires Android 10+, and some property portfolios still issue staff phones on older Android versions with long OEM update tails. Staff on Android 6 or 7 cannot enable the device-side lock, but they can receive every property-side lock event the same way as someone on Android 15. The two locks do not have the same version floor.

How is this different from 'smart camera' apps that push notifications to Android?

A smart camera app typically pushes a notification every time any camera detects motion. That is one signal. Three hundred raw motion events per day at a 16-camera property get muted inside a week because the ratio of signal to noise is wrong. The property-side lock described here runs three independent filters (zone, dwell, time) that all have to agree before anything gets shipped to the Android notification tray. A typical 16-camera apartment property sees roughly 200 raw person detections per day and delivers 3 to 8 alerts after the three filters. That 50 to 1 reduction is the difference between a channel that stays in service and one that gets silenced.

What happens if the Android phone receiving the alerts is locked by Android's own Theft Detection Lock at the same moment?

The incoming WhatsApp notification still posts to the lockscreen. The thumbnail is visible if the user has allowed sensitive notifications on the lockscreen; otherwise the collapsed text (zone label + dwell seconds + timestamp) posts and the thumbnail is hidden until unlock. Either way, the staff member hears the alert and can act. The device lock does not block incoming notifications; it blocks outbound data access from the locked phone. That is the whole point of the two locks being independent: a locked personal device still functions as a property alert endpoint.

Worth saying plainly

If the keyword “theft detection lock android” brought you here because you want the device feature, go turn it on. Settings, Google, All services, Theft protection. Enable it. That lock covers the phone in your pocket and it works. Done.

If the keyword brought you here because you run a property from your Android phone, the device-side lock is the easy half. The half most people miss is the second lock: a zone-based property-side lock that detects on the DVR's HDMI multiview and lands on the same Android phone through WhatsApp. Both locks together cover both assets. One phone, one notification tray, two independent locks, no conflict. That is what the phrase means for a property team.

🛡️CyranoEdge AI Security for Apartments
© 2026 Cyrano. All rights reserved.

How did this page land for you?

React to reveal totals

Comments ()

Leave a comment to see what others are saying.

Public and anonymous. No signup.