What should I preserve from the lock screen?¶

Preserve the complete visible screen as a snapshot of device state, including context that may disappear before protected content is accessible.

Record the whole display and connections¶

Capture displayed date and time, battery, signal, network, Wi-Fi, Bluetooth, wallpaper, emergency or owner details, alarms, missed calls and notifications. Photograph the whole handset and closer detail where authorised. Note charger, vehicle, headphones, watch and other accessories.

Keep conclusions within the display's limits¶

Do not swipe or open notifications merely to reveal more. That can change read state, synchronisation and display content. A notification may be delayed or duplicated; a contact label may be locally assigned; the displayed clock may be wrong.

Use the snapshot to identify leads and state, then corroborate against device databases, accounts and provider records. If the display is about to sleep, record promptly and seek advice before further interaction.