How Does Find My Work Offline? The Network Explained

Your iPhone is sitting in a stranger’s couch cushions somewhere across town. No battery indicator light. No cellular bars. And yet, three hours after you pressed the power button to save the last 4 percent of charge, the Find My app marks it on a map with a timestamp: seen 2 hours ago, offline.

No GPS. No SIM. No Wi-Fi. How?

The answer is one of the more elegant pieces of engineering in consumer technology: a crowd-sourced, end-to-end encrypted relay network built from over 1 billion Apple devices that most of their owners do not know is running.

Key Takeaways

• A lost iPhone broadcasts a rotating encrypted Bluetooth beacon every two seconds, with no connectivity of its own.
• Any passing Apple device anonymously relays that beacon with its own GPS coordinates, encrypted with a public key only the owner can invert.
• Apple stores the encrypted reports but cannot read them. Only the owner’s private key decrypts the actual location.
• On iPhone 11 and newer, a low-power Bluetooth circuit stays active for roughly 24 hours after the phone is powered off.
• The network fails when no Apple devices pass within Bluetooth range (30 to 100 feet) of the lost device.

The problem Find My has to solve

Most location tracking assumes the tracked device is awake and online. The device pulls its GPS coordinates, sends them to a server, and the owner reads the result. Simple.

The problem is that a lost or stolen iPhone is almost never online. Thieves power it off immediately. Batteries die. Airplane mode gets toggled. The moment a phone goes dark, traditional GPS tracking stops working entirely.

Find My’s offline network solves this by inverting the architecture. Instead of the lost device reporting its location, nearby devices do the reporting on its behalf: without knowing whose device they are reporting, without any human action, and without the owner paying anything extra.

The three roles in every location event

Every successful offline Find My location involves three parties doing very specific things.

The lost device (your missing iPhone) does exactly one thing: it broadcasts a Bluetooth Low Energy signal every two seconds. That signal contains a cryptographic public key, specifically a point on the P-224 elliptic curve, that rotates continuously so that no two broadcasts share the same identifier. The device is not listening. It is not connecting to anything. It is only transmitting.

The finder device (a stranger’s iPhone, Mac, or iPad) does three things without any human interaction: it detects the BLE beacon in the background, it notes its own current GPS location, and it encrypts that location using the public key it just received from the lost device’s broadcast. The encryption uses an ECIES (Elliptic Curve Integrated Encryption Scheme) construction, meaning only someone with the corresponding private key can ever decrypt the result. The finder device then uploads the encrypted bundle to Apple’s servers and forgets it entirely. The finder’s owner sees nothing. There is no notification, no battery hit worth measuring, no data to worry about.

Apple’s servers receive the encrypted bundle and store it, indexed by the SHA-256 hash of the public key that was broadcast. Apple can store it. Apple can retrieve it. Apple cannot decrypt it, because Apple never received the private key. The private key never left your device.

How you get the location back

When you open Find My on another Apple device signed into your account, the app does the following locally: it reconstructs the sequence of private keys that your lost phone was cycling through during the time window you specify, computes the corresponding SHA-256 hashes, and sends those hashes to Apple as a query. Apple returns the matching encrypted bundles. The Find My app then decrypts them locally, on your device, and plots the coordinates on the map.

Apple describes this in its Platform Security guide: “The owner of the missing device can reconstruct the index and decrypt the encrypted location.” The key word is “locally.” The decryption happens on your phone, not on Apple’s servers, which is why the private key never needs to travel anywhere.

The result is a location tagged with the timestamp of when the finder device uploaded it. That is why offline locations often read “seen 2 hours ago.” You are seeing the last time any Apple device passed close enough to relay a beacon, not a live GPS fix.

Why the beacon key rotates

The rotating key is not a quirk. It is the feature that makes the entire privacy design work.

If the lost device broadcast the same identifier continuously, anyone with the right app could track the device’s movement over time by logging the identifier across multiple sightings. This is what makes tracking people with devices like AirTags a legitimate concern: the anti-stalking alerts exist precisely because a static identifier would be a surveillance tool.

The rotation interval is approximately 15 minutes when the phone is online (coordinating the rotation schedule with iCloud), and the private key material is derived from a secret that only your Apple account controls. The practical consequence is that finder devices relay beacons without ever being able to correlate two broadcasts as coming from the same device. Even Apple, which receives every relay, cannot link them together without knowing the owner’s private secret.

The anonymity guarantee for finder devices

Apple’s Platform Security guide is explicit about what the relay includes and what it does not: “The traffic sent to Apple by finder devices contains no authentication information in the contents or headers. As a result, Apple doesn’t know who the finder is or whose device has been found.”

The person whose iPhone relayed your location cannot see your location. Apple cannot see your location. Nobody in the chain except you (the account holder) can reconstruct it. This is not a marketing claim; it follows directly from the cryptographic construction. You can verify the architecture by reading Apple’s Platform Security guide on Find My or the 2019 academic paper by researchers at TU Darmstadt who independently analyzed the protocol.

What happens when the iPhone is powered off

On iPhone XR, XS, and older models, powering off is a hard stop. The main processor shuts down, the Bluetooth radio loses power, and the beaconing stops. Find My shows the last known location from before shutdown.

On iPhone 11 and newer, the story is different. When iOS shuts down the main processor, it hands off a small Bluetooth beacon task to a dedicated low-power circuit that can run for roughly 24 hours on reserve power. This is the same architecture that keeps Express Transit cards active when the battery is dead. The iPhone maintains a tiny capacitive reserve separate from the main battery.

During those 24 hours, the powered-off iPhone continues broadcasting BLE beacons with the rotating key. Finder devices nearby continue relaying. The owner continues receiving encrypted location reports. The phone shows up in Find My as “offline” rather than “live,” but the location keeps updating as long as at least one Apple device passes within range approximately every few hours.

Once the reserve is depleted, or once the battery was already at zero before shutdown, the beaconing stops and Find My can no longer locate the device until it is powered back on.

This is why the advice “act fast” matters for a stolen iPhone. A thief who powers off an iPhone 11 or newer has not actually gone dark. They have a roughly 24-hour window before the device goes fully silent.

What the network looks like in practice

The scenario / outcome table below covers the most common situations.

Why density matters

The Find My network is as dense as the concentration of Apple devices around your lost phone. In midtown Manhattan, an airport terminal, or a shopping mall parking lot, a missing device gets a location update in minutes. There are simply too many iPhones nearby for a 30-to-100-foot gap to persist for long.

In a rural area (a national park, a stretch of highway, a farming community), the same device might not get a single relay for hours. The physics have not changed; the infrastructure has. A lost device in Yellowstone and a lost device in Times Square are running identical software. The difference is purely how many Apple devices drive past.

This also explains why international travelers who lose a device in a country with low iPhone market share (where Android dominates) may find the Find My network essentially non-functional. The larger guide to how phone tracking actually works covers the hardware layer differences between Apple and Android in more detail.

The privacy trade-off you are implicitly making

Every iPhone running iOS 14 or later, with offline finding enabled, is silently relaying beacons for strangers’ lost devices in the background. You opted in when you set up the phone; the setting is on by default.

Most people consider this a reasonable trade, for two reasons. First, the system is genuinely anonymous: your iPhone does not know it relayed a beacon, and you will never receive any information about whose device it was. Second, you benefit from the same relay when your own device is lost. The millions of people whose iPhones silently relayed a beacon for your lost phone are the reason you got it back.

The alternative, an opt-in network, would be smaller, spottier, and less useful for everyone. Apple’s decision to make participation default is what makes the 1-billion-device number meaningful.

If you want to opt out, Settings > [Your Name] > Find My > Find My iPhone > Find My network is the toggle. Turning it off removes your iPhone from the relay pool and also disables offline finding for your own device.

What breaks the system

Four things cause Find My’s offline network to fail, and all four are worth knowing before you lose a device.

Find My was off before the loss. This is the most common reason the network does not help. Find My must be enabled before a device is lost. There is no retroactive activation. Check it now at iCloud.com or in the Find My app.

No Apple devices passed within range. In low-density areas, the relay simply does not happen. The device may be broadcasting perfectly, but with nobody to relay, Apple receives nothing.

The battery reserve is depleted. On iPhone 11 and newer, the 24-hour window is a rough estimate under normal temperature conditions. Cold weather shortens it. A battery that was already at 2 percent before shutdown may have less than an hour of reserve.

A sophisticated thief used a Faraday bag. A metal-lined bag blocks all radio signals including BLE. A stolen iPhone inside one broadcasts nothing and receives nothing. This is rare in street theft but documented in organized electronics theft rings. For most losses (left in a cab, dropped at a concert), it is not a factor.

For the specific question of tracking a phone through all its states (off, dead, airplane mode), the detailed breakdown on powered-off phone tracking covers the conditional answer model in more depth. For recovering a stolen device using Find My in practice, the complete Find My guide walks through the step-by-step process including Mark As Lost and remote erase.

The architecture in one paragraph

A lost iPhone broadcasts a rotating encrypted Bluetooth public key every two seconds. Any passing Apple device detects it, encrypts its own GPS coordinates using that public key, and uploads the encrypted package to Apple indexed by a SHA-256 hash. Apple stores it but cannot read it. The owner queries Apple using the hashes they reconstruct from their own private key, downloads the encrypted bundles, and decrypts them locally. On iPhone 11 and newer, a low-power Bluetooth circuit keeps beaconing for up to 24 hours after the main battery is exhausted. The network has over 1 billion participants. None of them know they are participating in any given relay.

That is the whole system. It is worth understanding, because the one thing that reliably defeats it is turning off Find My before the device is lost, and that is entirely in your control.