Best practice is to shutdown phone when in this situation. Then passcode is required.