How to Remotely Lock Windows Mobile 6.5 via My Phone

Microsoft My Phone was a free cloud-based synchronization and device management service introduced for Windows Mobile 6.5 devices in 2009. Beyond synchronizing contacts, photos, and calendar appointments to the web, the service offered a dedicated web portal with remote security features designed to protect lost or stolen handsets. This article explains the exact mechanism Microsoft My Phone used to remotely lock a lost Windows Mobile 6.5 device over the air.

The Setup and Prerequisites

To utilize remote locking, the user had to register their handset with the Microsoft My Phone service beforehand. The My Phone client came preloaded on many Windows Mobile 6.5 devices or was downloaded via Windows Marketplace for Mobile. The user signed in using their Windows Live ID (now Microsoft Account), linking the specific hardware profile of the Windows Mobile device to their web account.

For a remote lock command to succeed, the lost device had to:

  • Be powered on.
  • Maintain an active cellular data connection or Wi-Fi connection.
  • Have the My Phone background services active.

Triggering the Remote Lock

When a device went missing, the user navigated to the Microsoft My Phone web portal (myphone.microsoft.com) from any desktop or mobile browser.

  1. Accessing Security Features: The user logged into their associated Windows Live ID and navigated to the device management dashboard, which featured a dedicated lost phone section.
  2. Setting the Lock Parameters: Upon selecting the "Lock" option, the user entered a custom personal identification number (PIN) required to unlock the phone once recovered.
  3. Adding a Return Message: The web interface allowed the owner to enter a custom message (such as an alternate contact phone number, email address, or reward details) to be displayed on the screen.
  4. Sending the Command: Once submitted, the Microsoft server dispatched an over-the-air (OTA) command directly to the Windows Mobile 6.5 operating system.

How the Device Processed the Command

Upon receiving the network command from Microsoft's servers, the local My Phone client interacted with the Windows Mobile 6.5 Security Manager. The device immediately engaged a system-level lock screen:

  • Override Existing States: The remote command immediately superseded whatever application was currently open or running on the device.
  • Display Custom Information: The screen displayed the owner's custom return message and contact details so that an honest finder could return the handset without accessing personal data.
  • Input Restrictions: The hardware keys and touch inputs were restricted exclusively to entering the designated unlock PIN or placing an emergency call.

Once locked, the device could only be unlocked by physically typing the newly created PIN directly into the handset or by initiating an unlock command from the web portal once the device was safely recovered.