mobile

After my phone was stolen (no display lock), I found many strange games appearing in my Google Play App list which I did not D/L. So first I removed all these apps from my list. (this was using my new phone)
Next I used And-Dev-Mgr to set a password on my stolen phone & also noted the last time the device was on line was 5 Apr-15.

However, on 7 Apr I found a new app which I didn't D/L. And-Dev-Mgr reports the device was last on line 5 Apr-15.
So does it mean the phone is not locked yet?

After setting the password on And-Dev-Mgr, I believe the phone will only be locked the next time it goes online. However, I'm not sure how long this "set password" request will remain active?

I specifically want to lock the phone, not erase all the data.