The Federal Trade Commission has drafted advice for smartphone users and BYOD employees to bolster mobile security user awareness.

In addition to enabling two-factor authentication, Sheryl Roth, an investigator for the Office of Technology and Investigation at the FTC, wrote that installing “Find My iPhone” (iOS) and “Find My Device” (Android) is critically important should a device is lost or stolen.

The agency also suggests for users to create a passcode for their devices that requires a six-digit passcode, pattern lock, or fingerprint scanner.

When it comes to social media or email accounts synced with devices, updating passwords, checking account notifications, and taking inventory of which devices have access to which accounts is key, according to the Roth’s FTC blog post. While the advice may seem basic, based on the record number of identity fraud incidents in 2016, many end users are failing to implement simple security controls.