Should I switch a digital device off?¶

Do not switch a device off automatically. Decide after recording the live state and comparing what shutdown may destroy with what continued operation may allow.

Power removal can protect and destroy¶

Shutdown may stop remote access, malicious activity or continuing change. It can also erase memory, close sessions, lose unsaved material and make encrypted storage inaccessible. A normal shutdown writes logs and closes applications; sudden power loss creates different risks, including corruption.

Before acting, capture the screen, lock state, battery, power connections, networks, open applications, accounts and alerts. Device type matters: phones, laptops, servers, routers and embedded systems do not react identically.

Make a device-specific decision¶

Consider remote wipe, continued harm, battery failure, live encryption access and the availability of competent support. Avoid navigating menus to perform an orderly shutdown unless that method and its effects are understood.

An unlocked or encrypted device, active incident or business-critical system warrants prompt specialist advice where practicable. Immediate safety may still require power removal; use the least destructive effective method and record why delay was unacceptable.

Identify the decision-maker, time, method and observed result. If the device powers down unexpectedly, preserve that fact rather than implying its live state survived.