For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
1answer
88 views

Can I remotely unlock my phone after I've remotely locked it?

Someone has stolen my phone s4 and is trying to extort me for 100 $. If I remotely lock my phone can I unlock my phone remotely? to let him know that I'm going to shut it down if he doesn't act.
0
votes
2answers
4k views

Lookout - Which application is trying to access the system with no authorization

Is there any log where I can check which unknown source app is trying to access the phone without authorization? Lookout keeps popping up this message but don't tell me which application is! It ...
1
vote
1answer
50 views

How to check that an Android device isn't being used in a botnet / sending spam emails?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
1
vote
0answers
49 views

Android 2.2 security in 2016

I have an old Samsung Dart t499 that I would like to give to my son for simple texting and phone calls. Assuming that (1) we don't install any apps and just use the ones that came by default on the ...
-1
votes
1answer
34 views

When an app wants permissions, is it isolated from others?

When an app asks for permissions for my media folder for example, does this mean it can access anything in my media folder? Are apps isolated to only save/read from a subfolder inside my media folder ...
1
vote
3answers
7k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
3
votes
1answer
87 views

Secure Android browser

The desktop versions of Firefox and Chrome use Google’s Safe Browsing service to warn the users about known bad websites. Looking at a Samsung handset running Android v5 I noticed that neither the ...
0
votes
0answers
202 views

Unable to send S/MIME Encrypted Emails; Galaxy S6 Edge/Marshmallow

This refers to the Galaxy native email client running on Android 6.0.1 on a Galaxy S6 Edge. I have successfully added my Comodo SHA-256 Client Authentication and Secure Email certificate to an Office ...
2
votes
2answers
6k views

Alarm is working even when the phone is powered off

I just discovered that if I set the alarm clock and then power off the phone (by holding the power button and then selecting "Power Off") the alarm will still go off when the time comes. Is this ...
0
votes
0answers
42 views

How to Forget All App Passwords

I haven't been able to find any sort of app or topic on here which allows a device to stop remembering passwords for apps, such as Facebook, Snapchat, Reddit, etc. I have strong passwords, and I ...
0
votes
0answers
40 views

Unable to download here maps

Guyzz I am trying to download here maps on my redmi 2. But it's not working I mean while downloading maps for India it keep on saying preparing. To download nothing happens further. Please help me to ...
0
votes
0answers
36 views

adware site through Phishing attack activated a VAS on my android

I suddenly got an sms from my service provider (Vodafon IN) that Silk Pack is active on your number as requested and rental of Rs. 15 has been deducted I had made no such request so i ...
7
votes
0answers
56 views

Are there any Google devices that support capabilities in their default kernel?

If I systemless root (no modification done to /system partition) a nexus device, would I be able to able to set capabilites on executables without changing the original kernel binary ? I often want ...
0
votes
1answer
212 views

Can I bypass the Google Verification on my Huawei Mate 8? [duplicate]

I just bought a Huawei Mate 8 and I can't set it up due to the Google account verification in the setup process. I've messaged the seller asking for the account details but he doesn't know. I don't ...
4
votes
1answer
749 views

How to disable pin/pattern lock in android device

I am not sure this is the right place to ask this question.? I have enabled pattern lock in my android device. Just for curiosity I am trying to disable and keep only swipe to unlock option but I can'...
0
votes
0answers
32 views

Can I use encrypted phone as a means of secure storage?

I have an encrypted Android phone. Can I mount this device to my computer and save files to it as a means of secure storage?
0
votes
1answer
46 views

What are the implications of an old Android version?

There have been various bugs and security flaws found in different versions of Android. Many have been pached in newer versions, but the non-updated devices remain bugged/vulnerable. My questions ...
0
votes
0answers
28 views

marshmallow security update bug

The April security update left my Nexus 5 with a mac address of zeros. How can I rollback this latest update?
1
vote
1answer
380 views

I've installed a custom recovery image, but not yet rooted my phone. How can I install SuperSU and subscribe to automatic updates?

I own a Samsung smartphone. I'm running Android 4.1.2 "Jelly Bean". I've also installed ClockworkMod Recovery 6.0.4.5. Each time I exit ClockworkMod Recovery, it offers to root my phone. I haven't ...
21
votes
5answers
31k views

Certificate Install without mandatory PIN lockscreen

Google Support says: The type of lock that's acceptable may be predetermined by your system administrator. Where I can define what's acceptable? I can regenerate the certificate if needed. So ...
0
votes
2answers
117 views

How to remove gunpowder virus?

I have recently been having problems on my device which includes random apps appearing on my phone and some chinese app that somehow was "pre-installed". As i scoured the internet for answers, i ...
1
vote
1answer
252 views

6.0.1 fails to send MMS over PIA Always-On VPN when using 4G LTE

Yesterday, I set up a PIA VPN. I've configured it to use IPv4 over T-Mobile 4G LTE. I'm unable to send or receive MMS while connected to the VPN -- they can be sent/received as normal when the VPN ...
10
votes
1answer
9k views

On Android, how can I disable Google Chrome's incognito mode?

Google Chrome for Android includes a feature called incognito mode. This feature, when I activate it, is designed to help prevent Chrome from automatically remembering and storing information about ...
1
vote
1answer
43 views

FB Messenger Security

Does anyone know how secure Facebook Messenger communication is? If you are having 1x1 chat (writing messages) or making a voice call, is it encrypted (end to end)? I know if you are using facebook....
0
votes
1answer
70 views

anyway to find stolen device location through android device manager while location is off?

My android device was lost few days back and now someone has it, unfortunately location setting was off on device so I can't find it through device manager but its telling me device was online 2 hours ...
38
votes
3answers
3k views

Encrypt the phone's internal storage

Is there a way to encrypt my phone's internal memory, in the same way you would encrypt a computer's partition? Ideally, the phone would always ask for the password when booting, and even if someone ...
6
votes
1answer
77 views

What are the security implications of using an app built “for debug”?

I've just come upon several .apk files hosted with Github projects which are "compiled for debug" (i.e. having application-debuggable set, which one can e.g. check using aapt dump badging /path/to/apk ...
0
votes
1answer
2k views

System has been modified. Pls contact the manufacturer. Thank you. — i don't know what this mean and something's wrong with my phone.

--- I accidentally deleted my android device manager and other folders on my phone that i thought was not useful at all. After, this message on my lock screen appeared. And i can't unlock my phone ...
34
votes
7answers
6k views

Stagefright security issue: what can a regular user do to mitigate the issue without a patch?

There appears to be a giant security vulnerability with Android that seems to basically affect all phones. PC World wrote: The vast majority of Android phones can be hacked by sending them a ...
21
votes
3answers
4k views

How do I secure/encrypt SD card data transparent to apps?

Are there any off-the-shelf options for securing the contents of an SD card so that files written by apps writing to SD are encrypted? If so, what is the best option? I'm looking for something for ...
2
votes
2answers
2k views

Is it possible to use “unlock with fingerprint” feature, and be asked for (after boot) giving passphrase and fingerprint on encrypted Galaxy S6

I would like to purchase a Samsung Galaxy S6. One of the main reasons for the choice of device is the (apparently) good fingerprint sensor. I would like to / have to encrypt my phone (my employer ...
0
votes
0answers
156 views

Move all my Authenticator credentials to a new phone

I have enabled 2 factor authentication, using Google Authenticator, for 6 services: LastPass, Dropbox, Evernote, Wordpress, Tumblr and Google. How can I transfer them all to my new phone? I followed ...
0
votes
1answer
52 views

How to protect all my passwords saved in Google if I lost a phone?

I save many passwords in Chrome. I used Chrome in my laptop and my android phone. If I lose my phone, how I can protect my passwords?
3
votes
1answer
199 views

Require fingerprint to answer call?

A friend has a problem with other people answering their phone and thereby intercepting their calls. Is anybody aware of an app, setting, or Android distro that requires a fingerprint swipe to answer ...
1
vote
1answer
95 views

Google password compromised?

A few days ago I noticed my phone notify me about my Google play account as if I had changed my password. Yesterday I found out I had been infected with a rootkit and a packet sniffer. I was able to ...
6
votes
1answer
137 views

Login to Android 6.0 with NFC card and Password

I am evaluating MI5 and its NFC functionality. I am considering to compliment my Samsung Galaxy S4 GT-i9506 with MI5 because of various significant improvements in the hardware, software and ...
1
vote
2answers
12k views

How to switch screen unlock from Pattern to Slide

On my Nexus 7 2013 Wi-Fi with Android 5.0.1 Lollipop I used the Slide setting for the lock screen. To experiment with a VPN, I switched to pattern lock. After deleting the VPN entry I had created, I ...
0
votes
0answers
48 views

Brute Forcing Android Lock; How Long Does It Take?

We've seen that iPhone calculation takes 80 milliseconds per trial to complete. And there's further increasing time penalty with each wrong trial. Android uses scrypt to generate its Encryption key, ...
2
votes
0answers
431 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
8
votes
1answer
9k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
12
votes
0answers
371 views

Canonical explanation of Android Encryption and Vulnerabilities

Note: Well, the bounty expired and one possible reason could be effort required to address as I gather from comments. Seeing the number of upvotes, it appears to be of interest to others as well. I ...
0
votes
0answers
43 views

Preventing users removing managed accounts

I've been using Android For Work (Google Admin) for a while now and I'm fairly happy with its range of policies available. Some of the main policies I've been applying for enrolled devices are ...
0
votes
1answer
124 views

Prevent USB data transfer (when phone is in use) and being charged

I would like to know how to protect my data when I use public battery charger in public places. I know that if I do not unlock my screen when charging, my data is safe, but what if I would like to ...
3
votes
2answers
124 views

Does using various app stores in parallel cause any issues?

I am using a Android phone with Lollipop and found that apps can be installed from various app stores like Google Play, Amazon App Store or F-Droid. Are there any problems I can run into if apps are ...
5
votes
2answers
989 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
0
votes
0answers
22 views

Is 4,294,967,295 the conceptual limit of apps installable to a android device? [duplicate]

This is a somewhat conceptual question. I know that other limits (i.e. like memory limit the number apps installed much more). Question According to the security guide of android.com sandboxing (and ...
0
votes
0answers
94 views

How to Implement fix for Samsung's CVE-2015-7888 in CM13

I run the security checkup of DuoSecurity lab here. They say my phone has the vulnerability CVE-2015-7888 in Samsung Galaxy S4 GT-I9506 which is using CyanogenMod 13. CVE-2015-7888 Remote Code ...
3
votes
2answers
6k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
13
votes
2answers
634 views

Does full device encryption protect my data from Google and the government?

Apple recently made waves within the tech community by refusing to comply with law enforcement in regards to accessing encrypted user data. Their statement was that they do not have the technical ...
4
votes
1answer
96 views

Joining a public WiFi made the owner able to send me a Facebook friend request. How?

I walked by a bar with free, unsecured WiFi. My device auto-joined it, and a minute later I had a friend request on Facebook from that very bar. How did they get my Facebook identity just from ...