Should I switch the device off?¶
Do not assume that switching a mobile device off is always the safest option.
What this means¶
Powering down may stop new data arriving, but it can also make evidence harder to access.
A live, unlocked device may become locked or strongly encrypted once it is switched off or restarted. Some information available in memory may be lost. Running apps, active sessions, decrypted storage and volatile data may no longer be accessible in the same way.
On the other hand, leaving the device powered and connected can also create risks.
New messages may arrive. Apps may synchronise. Data may be deleted remotely. The battery may run down. The device may lock automatically or change state through normal background activity.
There is no universal answer because the correct action depends on the device, its state, the apparent risks and the available specialist support.
Before doing anything, record whether it is on or off, locked or unlocked, connected or isolated, and what is visible on the screen.
The key is to avoid an unrecorded, habitual decision.
The operational takeaway is: do not switch a mobile device off by default. Preserve its current state, assess the risks of both action and inaction, and obtain specialist advice where the device is live, unlocked, encrypted or potentially volatile.
What to check or do next¶
- If the device is already off, do not automatically turn it on. Starting it may change data, trigger network connections or require credentials that are not available.
- If it is on and unlocked, treat that as potentially important and seek specialist guidance urgently.
- If there is an immediate safety issue, such as a damaged or overheating battery, safety takes priority.