Xiaomi Mi Smart Band 4 includes two different lock features: a screen lock for accidental touches and a band lock that can require a password after the band detects it has been removed from the wrist. Notification settings, phone security, and account protection provide additional privacy.

Screen Lock
Screen lock is the lighter of the two lock features. When enabled, waking the display does not immediately make the controls available. You first swipe up to continue.
This is useful when the band may receive unintended screen input from clothing, moisture, or casual touches. It is designed mainly to reduce accidental operation rather than provide password-level authentication.
[step] 1. Wake the band and open More. 2. Open Settings. 3. Find the screen lock option. 4. Turn screen lock on. 5. After the display wakes, swipe up when prompted before using the band. [/step]Band Lock When Removed

Band lock provides the more important privacy layer. After it is enabled, the Mi Smart Band 4 can detect that it is no longer being worn and activate a password lock.
[reference] Title: While Worn Text: The band remains available for normal use according to its display and lock settings. Title: After Removal Text: When off-wrist detection recognizes that the band is not being worn, band lock can activate. Title: Password Text: The password is configured through the companion app and is required to regain access after the off-wrist lock activates. [/reference]Set Up Band Lock
[step] 1. Open the companion app and select Mi Smart Band 4 from your device profile. 2. Open Band lock or the equivalent security setting. 3. Set the unlock password when prompted. 4. Save the setting and allow the band to synchronize. 5. Remove the band and check that password protection activates as expected. [/step] [tip] Band lock is more useful for privacy than screen lock alone because it adds password protection after wrist removal. [/tip]Pairing and Account Protection
The Mi Smart Band 4 is paired through its companion app and associated with the account used for synchronization. Pairing and account binding help prevent casual reassignment of the band and keep synchronized history associated with the correct account.
When moving to another phone or account, re-binding may be required. A factory reset also clears data held locally on the band and returns it to a state where it can be paired again.
[dosdonts] Do: Keep the account password private and use stronger account protection when available. Do: Keep the phone that manages the band protected with a PIN, password, pattern, or biometric screen lock. Do: Use an app-lock feature for the companion app if your phone provides one and you want another privacy layer. Dont: Leave an unlocked phone unattended when it provides access to band settings and synchronized activity data. Dont: Share account credentials simply to let another person manage the band. [/dosdonts]Notification Privacy

The band can display information from incoming calls, messages, and enabled app alerts. This is convenient, but notification text can also become visible when another person looks at your wrist or when the band is lying nearby.
In the companion app, use the notification settings to control which apps are allowed to send alerts to the band. Incoming-call alerts and app alerts can also be managed separately.
[checklist] * Enable notifications only for apps you actually want on the band * Review incoming-call alert settings * Avoid sending highly sensitive banking or one-time-password notifications to the band * Use any notification privacy controls available in your phone or current app version [/checklist]Do Not Disturb and Privacy
Do Not Disturb is primarily an alert-control feature, not a security lock. It can still improve privacy by reducing vibration and screen activity when you do not want notifications drawing attention.
The Mi Smart Band 4 provides DND controls from the band. Available choices can vary with firmware, including manual or automatic behavior on some versions.
[tip] Use DND during sleep, meetings, or other situations where unnecessary notification activity could expose information or cause distractions. [/tip]If the Band Is Lost
The Mi Smart Band 4 does not provide phone-style standalone GPS tracking. The companion app's Find band function works only while the band remains within Bluetooth connection range.
The band can retain recent activity information before synchronization, while synchronized history is associated with the companion app and account. Band lock therefore helps reduce casual access to information that remains on the device.
[checklist] * Keep the paired phone secured * Protect the account used with the companion app * Change the account password if you believe the account itself may be exposed * Check nearby areas with Find band while the device is still within Bluetooth range * Pair a replacement band with the same account when you want access to previously synchronized history [/checklist] [warning] Band lock helps with casual privacy, but it should not be treated as a substitute for protecting the phone and account that hold the broader synchronized data. [/warning]Factory Reset and Privacy
A factory reset clears data and settings held on the band and returns it to a state that requires pairing again. It can be appropriate before giving the band to another person or when intentionally starting over with its local configuration.
[step] 1. On the band, open More. 2. Open Settings. 3. Select Factory reset. 4. Follow the confirmation shown on the band. 5. Pair the band again if you want to continue using it. [/step]A band reset affects information stored locally on the device. Data that was already synchronized to the companion app and associated account is separate from the local reset.
[warning] If you sell or give away the band, reset it first so your locally stored band data and settings are not left on the device. [/warning]Recommended Security Setup
[checklist] * Enable screen lock if accidental touches are a concern * Enable Band lock and set a password for off-wrist protection * Keep only necessary app notifications enabled * Avoid displaying sensitive banking or verification-code alerts on the band * Use DND when you want fewer visible or vibrating alerts * Protect the paired phone with a strong screen lock * Protect the companion app with app lock if your phone supports it * Keep the Mi account or companion-app account password private [/checklist]Security Limits
The Mi Smart Band 4 provides useful everyday privacy controls, but it is not designed with the same security capabilities as a modern phone or computer.
[reference] Title: Authentication Text: Band lock can use a password after off-wrist detection, while screen lock uses a simpler swipe action. Title: Biometrics Text: The band does not provide fingerprint or face authentication. Title: Tracking Text: Find band depends on Bluetooth range rather than standalone GPS location tracking. Title: Data Protection Text: The strongest practical protection comes from combining band lock with a secured phone and account. [/reference]Screen lock and Band lock serve different purposes. Use screen lock for accidental-touch protection and Band lock when you want password protection after the band is removed.[faq] Q: Are screen lock and Band lock the same feature? A: No. Screen lock requires a swipe after waking the display. Band lock can require a password after the band detects that it has been removed from the wrist. Q: Can the band be located anywhere after it is lost? A: No. Find band works while the band remains within Bluetooth connection range; the Mi Smart Band 4 does not provide standalone GPS tracking. Q: Does a factory reset erase synchronized history from the account? A: A factory reset clears the band itself. Information already synchronized to the companion app and account is stored separately from the band's local data. Q: Is Band lock enough to protect all fitness and account data? A: No. It protects access to the band itself after removal. The paired phone and account should also be secured because they contain broader settings and synchronized information. [/faq]