Updated July 2026.
Replacing an iPhone can change more than the screen you use to control Apple Home. The phone may hold your Apple Account session, passcode and biometrics, Home access, lock credentials, vendor apps, camera access, geofences, notifications, cellular service, password manager, two-factor prompts, and recovery routes. Use this checklist for a planned upgrade, a damaged phone, or a lost device without confusing the phone with the alarm, lock, camera, or Home hub itself.
First decide which replacement path applies
| Situation | First priority | Do not assume |
|---|---|---|
| Planned upgrade with both phones available | Inventory access, prepare recovery, transfer, test the new phone, then remove and erase the old phone | That an automatic phone transfer proves every Home, lock, alarm, camera, app, Wallet, automation, and monitoring job works |
| Old phone is damaged but in your possession | Protect power and data, recover through documented Apple and vendor routes, and keep another authorized controller available | That repeated restarts, account changes, or resets will preserve credentials and evidence |
| Phone is lost or stolen | Use Apple’s current Find My and lost-device guidance from a trusted device, protect accounts, and verify physical security | That a screen lock alone removes Home, vendor-app, Wallet, notification, email, cellular, or recovery risk |
| Phone belongs to a departing resident or worker | Remove the person from every relevant platform and prove old access fails | That removing one Apple Home member removes vendor accounts, lock codes, alarm users, camera shares, automations, or recovery methods |
| Only household administrator is unavailable | Use the documented owner and account-recovery plan; preserve direct security and local access | That another Home member has owner rights, billing access, monitoring authority, or vendor-account recovery |
Understand the phone’s security jobs
An iPhone can be a controller and credential without being the device that performs direct security. Record each job separately.
| Job | Where it may live | Replacement proof |
|---|---|---|
| Apple Home control | Apple Account, Home membership, Home app, household role, and a supported home hub for remote functions | Correct Home, rooms, accessories, scenes, alerts, and remote control from the new phone |
| Alarm control and monitoring | Alarm panel or hub, keypad, user code, vendor account, app, communicator, monitoring provider, and contacts | Direct sensing and local warning work; the new app shows the correct property; approved monitoring test completes |
| Door access | Mechanical key, lock cylinder, keypad code, vendor app, Home access, Wallet credential where supported, guest role, and schedule | Authorized online and offline entry work; the removed phone and old credentials fail |
| Camera viewing and evidence | Camera vendor account, Home access, supported recording service, storage, viewers, shared links, and notifications | Live view, alert, recording, timestamp, retention, playback, export, and old-viewer removal are confirmed |
| Automations and location triggers | Home, vendor platform, phone location permission, household presence, scenes, shortcuts, and another controller | Each trigger, condition, action, owner, manual override, duplicate path, and safe failure is tested |
| Account and recovery | Apple Account, trusted devices and numbers, email, password manager, authenticator, recovery contact or key, vendor accounts, and carrier | The owner can sign in and recover without the old phone; removed sessions and numbers no longer work |
Before a planned iPhone replacement
- Update the household security inventory. Record the old phone model, operating-system version, Apple Account owner, Home role, device name, phone number, carrier, trusted status, passcode owner, and intended disposition.
- List every Home, alarm, camera, lock, garage, gate, intercom, network, lighting, smoke/CO, water, energy, and monitoring app. Record the account owner, role, billing owner, recovery route, and required plan.
- Confirm another authorized person or device can perform essential local jobs: enter the property, disarm, view the correct alarm state, contact monitoring, and follow the emergency plan.
- Export or record information that is meant to survive the change: device inventory, zone names, support contacts, permits, installation records, approved recovery codes, and evidence required for an open incident. Do not copy secrets into an unprotected note.
- Review Apple’s current iPhone support and the exact vendor instructions for transfer, backup, account recovery, Wallet credentials, and device removal. Product behavior can change by model, software version, region, and service.
- Pause nonessential location, arrival, departure, unlock, open, disarm, or camera automations that could act differently while both phones are present. Record each paused rule and owner.
If the old iPhone is lost or stolen
- From a trusted device, use Apple’s current Find My location guidance and lost-device guidance. Do not confront a suspected thief.
- Check the physical property first. Confirm doors, windows, alarm state, locks, garage or gate, cameras, recent events, and household safety. Contact emergency services for a real emergency.
- Record loss time, last trusted location, last successful Home or vendor action, phone and SIM/eSIM state, notifications visible on the lock screen, Apple Account and vendor sessions, Wallet credentials, email, password manager, authenticator, and recovery exposure.
- Use verified Apple, carrier, alarm, lock, camera, monitoring, email, and financial-service channels. Change or revoke access in a controlled order that preserves your own recovery path.
- Remove the lost phone and its user only after mapping dependencies. Then prove old Home access, vendor sessions, lock or Wallet credentials, alarm control, camera history, shared links, automations, invitations, trusted-device prompts, and recovery routes fail.
Prepare Apple Account and recovery paths
Record the Apple Account owner, trusted devices, trusted phone numbers, recovery contacts or recovery key where used, account-recovery process, and who can access the email and carrier account. Apple’s iCloud Keychain support page explains current password and passkey syncing at a high level; verify current Apple instructions before changing account or sync settings.
Keep Home ownership separate from alarm, camera, lock, monitoring, and vendor ownership. A person who can control an accessory in Apple Home may not be able to transfer the vendor account, change billing, cancel monitoring, export recordings, reset hardware, or recover an installer-managed system.
The HomeKit account-recovery guide provides an owner, trusted-device, member, hub, vendor, and recovery worksheet. The emergency-access checklist covers phone loss, local entry, alarm control, and an unavailable administrator.
Bring the new iPhone online in a controlled order
- Name the phone clearly and record its model, software version, Apple Account, phone number, carrier state, passcode owner, biometric users, and recovery role.
- Confirm the correct Apple Home appears. Check household role, rooms, accessories, bridges, cameras, locks, scenes, automations, and notifications without changing them yet.
- Install each security vendor app from its official listing. Sign in through the verified owner route; confirm the correct property, account, role, plan, device list, event history, and monitoring state.
- Restore only approved lock and Wallet credentials. Test physical and keypad fallbacks before treating phone access as ready.
- Set notification permission, critical or time-sensitive behavior where supported and approved, focus modes, location permission, background behavior, cellular data, and low-power behavior. Save screenshots of the accepted state without exposing secrets.
- Resume one location or presence automation at a time. Test the trigger, condition, action, manual override, duplicate-controller behavior, delay, notification, and safe failure.
Home hub, bridge, and Thread checks
An iPhone should not be the only documented path for a security job. Record the selected Home hub, standby hubs, bridge, supported Thread Border Router where relevant, router, access point, Wi-Fi band, Ethernet, account owner, firmware, power, battery backup, and restart order.
If the phone change coincides with a hub change, stop and split the work. Use the Apple TV replacement checklist or HomePod replacement checklist first. When accessories are shared with another Matter controller, reconcile each fabric and administrator with the Matter multi-admin checklist.
Test alarms without treating the Home app as the alarm
Apple Home control or a notification does not prove the direct sensor, local siren, cellular communicator, monitoring center, emergency call, permit, or dispatch. Put monitored service into its approved test mode and confirm which event types are included. Do not trigger an emergency response during testing.
- Open, close, tamper, and restore each approved direct sensor. Confirm the panel or hub state, correct zone name, local warning, new-phone alert, event history, and restoration.
- Arm and disarm only with authorized controls. Test keypad or physical fallback separately from the new phone.
- Confirm monitoring contacts, verbal password, cancellation route, property details, permit, and restoration where professional service is selected.
- End optional service in the worksheet and record what remains for sensing, warning, app control, history, automations, communications, support, and data.
Test cameras and privacy on the new phone
| Check | Record |
|---|---|
| Live view | Correct camera, physical view, load time, audio state, quality, network path, and plan state |
| Event evidence | Physical event, alert time, first useful frame, recording start, timestamp, missing seconds, clip length, and false-event result |
| Storage | Local or cloud owner, capacity or retention, overwrite, failed-storage warning, playback, export, and deletion |
| Privacy | Physical boundary, activity and privacy zones, audio, viewers, shared links, household roles, and removed-user proof |
| Phone failure | Low power, focus mode, no cellular data, weak Wi-Fi, internet loss, revoked permission, signed-out app, and unavailable owner |
Test locks, garages, gates, and access credentials
A phone, geofence, voice phrase, camera detection, or one presence state should not unlock, open, or disarm by itself. Require a deliberate authorized action or another documented safe condition, and preserve the property’s approved manual and emergency routes.
Test the new phone, physical key or control, keypad code, guest role, schedule, low battery, no internet, no Home hub, unavailable owner, and removed old phone. Record door or gate state separately from the command. A successful app tap does not prove the opening closed or locked.
Remove the old phone only after acceptance
- Compare the old and new inventories: Apple Home, vendor apps, Wallet or lock credentials, alarm users, camera viewers, automations, trusted-device roles, phone numbers, authenticator entries, password manager, email, carrier, and recovery methods.
- Complete the new-phone acceptance test below. Resolve missing notifications, duplicate presence, unavailable recordings, wrong property, stale users, and failed local access first.
- Remove the old phone from Home and vendor platforms only through the approved owner process. Revoke relevant sessions and credentials; prove they fail.
- Follow current Apple guidance to sign out, erase, transfer, return, sell, recycle, or retain the old device. Record date, owner, serial where needed, data state, SIM/eSIM state, and disposition.
- Review the inventory again after 24 hours. Check missed alerts, duplicate automations, battery drain, location behavior, monitoring events, and user reports.
45-minute HomeKit iPhone replacement acceptance test
- Reconcile the new phone to the correct Apple Account, Home, role, phone number, carrier, trusted-device state, recovery route, vendor accounts, plans, and monitoring authority.
- Trigger every direct sensor and local warning 10 times under approved test conditions. Confirm correct state, new-phone alert, event history, response, and restoration.
- Walk each camera route by day and in low light. Save alerts, first useful frames, recordings, timestamps, retention, playback, export, audio, and privacy results.
- Operate each approved lock, garage, gate, and alarm control by new phone and local fallback. Test a removed old phone, unavailable owner, low battery, and no internet.
- Run each location or presence automation one at a time. Confirm trigger, condition, action, delay, duplicate-controller behavior, notification, manual override, and rollback.
- Safely disconnect internet and test the documented power-failure route. Record direct security, local warning, access, cameras, recording, Home hubs, bridges, alerts, monitoring, restart, and restoration.
- Prove the old phone’s Home access, vendor sessions, credentials, camera history, shared links, invitations, automations, trusted prompts, and recovery routes fail before disposal.
Where a sensor-led alarm fits
If the household needs direct sensors and optional professional monitoring alongside Apple Home, compare Abode’s current Smart Security Kit and plans against the same phone-loss, local-control, account, user, outage, and service-end tests. Verify exact compatibility and service details before purchase.
Bottom line
A successful iPhone replacement leaves the household safer than it started: the new phone has the minimum required access, direct alarms and local entry do not depend on one handset, camera and automation behavior is measured, recovery works, and the old phone can no longer control, view, or recover the system.
