For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
1answer
15 views

Android AccountManager security

I've asked this question before, but got no suitable replies, so here I go again. How does the Android AccountManager which is used to store your Google, Facebook, Twitter, etc... usernames and ...
27
votes
3answers
7k views

What are the security disadvantages of rooting an Android phone?

I know there was a discussion previously BUT they didn't talk about security. E.g.: if I root my phone will all my apps run with root permission? Related: Are there any risks to rooting a device?
2
votes
1answer
2k views

Android 4.x doesn't require lock screen at home

In Android 4.x, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting proximity to my ...
0
votes
0answers
15 views

Work Gmail connected to Android - can employer access mobile data?

Today, my Sony Xperia Z3+ (Android) suddenly showed a notice about performing an "Authentication" and I noticed that have been sent an email about the "MyXperia Protection" to both, my private Gmail ...
1
vote
1answer
31 views

Android for work with KNOX 0x1

I have a device supported by Android for Work (Samsung Note 4, Android 6.0.1) but the security policy will not install saying "there is a custom OS installed". Device security status is "Official", ...
0
votes
0answers
43 views

“The certificate was not installed” error when installing a CA root certificate

I am developing an Android mobile application and want to test that the application behaves as expected. I am using the OWASP ZAP intercepting proxy for this purpose. The application communicates to ...
0
votes
1answer
141 views

Increase 30 seconds lock time after incorrect attempts

If I try to unlock my Samsung Galaxy A3 (Android Version 5.0.2) with an incorrect password 5 times I have to wait 30 seconds before I can try again. I want to increase this waiting time: how can I do ...
1
vote
1answer
1k views

ActiveSync/Exchange security policy

On my HTC DNA I recently changed from the integrated ActiveSync client to Touchdown. My corporate IT policy required a PIN to access the device when using the Android client. Now that I switched to ...
8
votes
3answers
9k views

IMEI number publicly displayed whenever connected to Wifi

I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...
0
votes
2answers
49 views

Where can I report vulnerabilities to Google?

Where can I report glitches/bugs/vulnerabilities to google? I would look it up, but I don't know how to word it. Besides, I am working on more devices I can count (don't ask) and I have found some... ...
0
votes
0answers
84 views

Pattern Lock removal via Android Device Manager not working (NOW FIXED)

The black screen saying "Locked by Android Device Manager" is visible, but there is no input space for a password. I was unable to correctly enter my pattern (which I put right after installing ...
4
votes
2answers
1k views

Apps trying to install in background

I recently wanted to install a metronome app, so I downloaded one from the Play Store, but in the "install" step nothing happened. The app just wasn't there. I installed another one and forgot about ...
12
votes
1answer
45k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
47
votes
5answers
4k views

Is an antivirus really needed for Android?

I use Linux for half a decade now, so I am not used to dealing with viruses anymore. To my surprise, I saw some discussion about antiviruses in Android. I haven't installed any yet, but this bugs me: ...
-2
votes
0answers
43 views

“Device Configuration” Application

There is an app titled "Device Configuration" installed on my device, which I did not install. It is 68kb and does not appear in the App Drawer, only in 'Apps'. What is this app and how did it come ...
-3
votes
0answers
33 views

Hey guys my phone is hacked , help?

I been everywhere u name it; sumsung , tech support etc. Everything on my phone is being looked at or controlled any help someone more informed can be able to help with ? Knox: SSO:2.41.1 ...
0
votes
1answer
96 views

How can I prevent installation of NEW applications on an Android 5.1 device, but keep auto-updates of existing applications?

We will soon have to provide a phone to a person who is obviously not familiar with IT stuff at all, and not capable of learning anything about information security, etc. (and probably not capable of ...
4
votes
2answers
2k views

Encrypted phone no longer asks for pattern when turning on?

Nexus 6 running stock 5.0.1 not rooted. It used to ask me for my pattern every time I turned it on from a powered off state. Now it seems to boot fully without asking. Under Settings > Security it ...
3
votes
2answers
82 views

How to prevent two-factor code being exposed on lock screen in messages notification?

On Lollipop, the text message notification on the lock screen includes some of the content of the text message. For two-factor code text messages, this will display the two factor code to anyone ...
0
votes
1answer
50 views

How to Prevent CM13 Calling by Itself?

I noticed today that my Samsung Galaxy S4 with CM13 (unofficial Kyasu's ROM) called two my contacts itself; those contacts were those which I keep in my blacklist; which was also why I had react to ...
1
vote
0answers
24 views

How to Have 2nd Step Verification for Making Calls in 6.0?

I would like to use 2nd Step Verification always for Making Calls. I can use a second device to get those codes; etc second Gmail account; or a similar encryption device as used by banks. I do not ...
9
votes
3answers
169 views

Pros and cons of rooting using apps (“Soft Root”) compared to other methods (“Hard Root”)

There are quite a few app based rooting methods. A recent review 9 free software apps to root Android devices, points to some of them and there may be more apps, paid or otherwise. From what I ...
-1
votes
1answer
34 views

Disable toast when screen is pinned in Android

When passing my phone to someone, I pin the screen for safety reasons. Is there a way to disable those ugly toasts which keep popping up and giving them a gist of what's happening?
0
votes
0answers
11 views

When is the secure element initialized?

I am new to SE and Global Platform. As far as I know from the spec, when you want to do something, you need to finish the external authentication first. Since the authentication requires a S-ENC key, ...
1
vote
1answer
49 views

Hard brick phone exchange and deleting data

I have a Samsung Galaxy Note 4. While it was charging (it was near full charge) it rebooted on its own and continued to charge. It then must have shut itself down because it was off. I could not turn ...
0
votes
1answer
74 views

What are all these security certificates on new phone?

This is a new T-Mobile Samsung Galaxy S7. Is it normal to have all these certificates? Many look dodgy. Image resized. Click to see full-version
-1
votes
1answer
29 views

What application is “using my screen” with some kind of overlay? [duplicate]

I want to turn on accessibility permission to Greenify app. But I'm unable to click "ok". I also have Twilight and since some security built in the system, I have to disable, stop or uninstall the ...
1
vote
0answers
31 views

Can Samsung patch security faults on their devices by an update?

There was an exploit that turns Samsung Galaxy phones into remote bugging devices (reference: ArsTechnica) As many as 600 million Samsung phones may be vulnerable to attacks that allow hackers to ...
0
votes
0answers
144 views

Problem with some Apps trying to install

I have a problem with my Android 5.1 When the screen is locked, and I to unlock it, a popup shows, that some unknown applications are trying yo install. I have formatted the mobile twice, but it ...
0
votes
1answer
86 views

Can I remotely unlock my phone after I've remotely locked it?

Someone has stolen my phone s4 and is trying to extort me for 100 $. If I remotely lock my phone can I unlock my phone remotely? to let him know that I'm going to shut it down if he doesn't act.
0
votes
2answers
4k views

Lookout - Which application is trying to access the system with no authorization

Is there any log where I can check which unknown source app is trying to access the phone without authorization? Lookout keeps popping up this message but don't tell me which application is! It ...
1
vote
1answer
47 views

How to check that an Android device isn't being used in a botnet / sending spam emails?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
1
vote
0answers
40 views

Android 2.2 security in 2016

I have an old Samsung Dart t499 that I would like to give to my son for simple texting and phone calls. Assuming that (1) we don't install any apps and just use the ones that came by default on the ...
-1
votes
1answer
33 views

When an app wants permissions, is it isolated from others?

When an app asks for permissions for my media folder for example, does this mean it can access anything in my media folder? Are apps isolated to only save/read from a subfolder inside my media folder ...
1
vote
3answers
7k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
3
votes
1answer
79 views

Secure Android browser

The desktop versions of Firefox and Chrome use Google’s Safe Browsing service to warn the users about known bad websites. Looking at a Samsung handset running Android v5 I noticed that neither the ...
0
votes
0answers
153 views

Unable to send S/MIME Encrypted Emails; Galaxy S6 Edge/Marshmallow

This refers to the Galaxy native email client running on Android 6.0.1 on a Galaxy S6 Edge. I have successfully added my Comodo SHA-256 Client Authentication and Secure Email certificate to an Office ...
2
votes
2answers
6k views

Alarm is working even when the phone is powered off

I just discovered that if I set the alarm clock and then power off the phone (by holding the power button and then selecting "Power Off") the alarm will still go off when the time comes. Is this ...
0
votes
0answers
40 views

How to Forget All App Passwords

I haven't been able to find any sort of app or topic on here which allows a device to stop remembering passwords for apps, such as Facebook, Snapchat, Reddit, etc. I have strong passwords, and I ...
0
votes
0answers
35 views

Unable to download here maps

Guyzz I am trying to download here maps on my redmi 2. But it's not working I mean while downloading maps for India it keep on saying preparing. To download nothing happens further. Please help me to ...
0
votes
0answers
32 views

adware site through Phishing attack activated a VAS on my android

I suddenly got an sms from my service provider (Vodafon IN) that Silk Pack is active on your number as requested and rental of Rs. 15 has been deducted I had made no such request so i ...
8
votes
1answer
5k views

How to export SSL certificate from Android, Chrome

I have a Nexus 5 with the latest Android 4.4.2. I'm registered on using Chrome . They use client certificates to authenticate the user. I installed the certificate and could successfully use the site ...
6
votes
0answers
53 views

Are there any Google devices that support capabilities in their default kernel?

If I systemless root (no modification done to /system partition) a nexus device, would I be able to able to set capabilites on executables without changing the original kernel binary ? I often want ...
0
votes
1answer
166 views

Can I bypass the Google Verification on my Huawei Mate 8? [duplicate]

I just bought a Huawei Mate 8 and I can't set it up due to the Google account verification in the setup process. I've messaged the seller asking for the account details but he doesn't know. I don't ...
4
votes
1answer
694 views

How to disable pin/pattern lock in android device

I am not sure this is the right place to ask this question.? I have enabled pattern lock in my android device. Just for curiosity I am trying to disable and keep only swipe to unlock option but I ...
0
votes
0answers
31 views

Can I use encrypted phone as a means of secure storage?

I have an encrypted Android phone. Can I mount this device to my computer and save files to it as a means of secure storage?
0
votes
1answer
37 views

What are the implications of an old Android version?

There have been various bugs and security flaws found in different versions of Android. Many have been pached in newer versions, but the non-updated devices remain bugged/vulnerable. My questions ...
0
votes
0answers
26 views

marshmallow security update bug

The April security update left my Nexus 5 with a mac address of zeros. How can I rollback this latest update?
1
vote
1answer
352 views

I've installed a custom recovery image, but not yet rooted my phone. How can I install SuperSU and subscribe to automatic updates?

I own a Samsung smartphone. I'm running Android 4.1.2 "Jelly Bean". I've also installed ClockworkMod Recovery 6.0.4.5. Each time I exit ClockworkMod Recovery, it offers to root my phone. I haven't ...
21
votes
5answers
31k views

Certificate Install without mandatory PIN lockscreen

Google Support says: The type of lock that's acceptable may be predetermined by your system administrator. Where I can define what's acceptable? I can regenerate the certificate if needed. So ...