For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

10
votes
1answer
7k views

On Android, how can I disable Google Chrome's incognito mode?

Google Chrome for Android includes a feature called incognito mode. This feature, when I activate it, is designed to help prevent Chrome from automatically remembering and storing information about ...
1
vote
1answer
36 views

FB Messenger Security

Does anyone know how secure Facebook Messenger communication is? If you are having 1x1 chat (writing messages) or making a voice call, is it encrypted (end to end)? I know if you are using ...
0
votes
1answer
57 views

anyway to find stolen device location through android device manager while location is off?

My android device was lost few days back and now someone has it, unfortunately location setting was off on device so I can't find it through device manager but its telling me device was online 2 hours ...
38
votes
3answers
3k views

Encrypt the phone's internal storage

Is there a way to encrypt my phone's internal memory, in the same way you would encrypt a computer's partition? Ideally, the phone would always ask for the password when booting, and even if someone ...
6
votes
1answer
70 views

What are the security implications of using an app built “for debug”?

I've just come upon several .apk files hosted with Github projects which are "compiled for debug" (i.e. having application-debuggable set, which one can e.g. check using aapt dump badging /path/to/apk ...
0
votes
1answer
2k views

System has been modified. Pls contact the manufacturer. Thank you. — i don't know what this mean and something's wrong with my phone.

--- I accidentally deleted my android device manager and other folders on my phone that i thought was not useful at all. After, this message on my lock screen appeared. And i can't unlock my phone ...
34
votes
7answers
6k views

Stagefright security issue: what can a regular user do to mitigate the issue without a patch?

There appears to be a giant security vulnerability with Android that seems to basically affect all phones. PC World wrote: The vast majority of Android phones can be hacked by sending them a ...
21
votes
3answers
4k views

How do I secure/encrypt SD card data transparent to apps?

Are there any off-the-shelf options for securing the contents of an SD card so that files written by apps writing to SD are encrypted? If so, what is the best option? I'm looking for something for ...
2
votes
2answers
1k views

Is it possible to use “unlock with fingerprint” feature, and be asked for (after boot) giving passphrase and fingerprint on encrypted Galaxy S6

I would like to purchase a Samsung Galaxy S6. One of the main reasons for the choice of device is the (apparently) good fingerprint sensor. I would like to / have to encrypt my phone (my employer ...
0
votes
0answers
65 views

Move all my Authenticator credentials to a new phone

I have enabled 2 factor authentication, using Google Authenticator, for 6 services: LastPass, Dropbox, Evernote, Wordpress, Tumblr and Google. How can I transfer them all to my new phone? I followed ...
0
votes
1answer
49 views

How to protect all my passwords saved in Google if I lost a phone?

I save many passwords in Chrome. I used Chrome in my laptop and my android phone. If I lose my phone, how I can protect my passwords?
3
votes
1answer
126 views

Require fingerprint to answer call?

A friend has a problem with other people answering their phone and thereby intercepting their calls. Is anybody aware of an app, setting, or Android distro that requires a fingerprint swipe to answer ...
1
vote
1answer
91 views

Google password compromised?

A few days ago I noticed my phone notify me about my Google play account as if I had changed my password. Yesterday I found out I had been infected with a rootkit and a packet sniffer. I was able to ...
6
votes
1answer
125 views

Login to Android 6.0 with NFC card and Password

I am evaluating MI5 and its NFC functionality. I am considering to compliment my Samsung Galaxy S4 GT-i9506 with MI5 because of various significant improvements in the hardware, software and ...
1
vote
2answers
11k views

How to switch screen unlock from Pattern to Slide

On my Nexus 7 2013 Wi-Fi with Android 5.0.1 Lollipop I used the Slide setting for the lock screen. To experiment with a VPN, I switched to pattern lock. After deleting the VPN entry I had created, I ...
0
votes
0answers
48 views

Brute Forcing Android Lock; How Long Does It Take?

We've seen that iPhone calculation takes 80 milliseconds per trial to complete. And there's further increasing time penalty with each wrong trial. Android uses scrypt to generate its Encryption key, ...
2
votes
0answers
387 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
8
votes
1answer
9k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
12
votes
0answers
299 views

Canonical explanation of Android Encryption and Vulnerabilities

Note: Well, the bounty expired and one possible reason could be effort required to address as I gather from comments. Seeing the number of upvotes, it appears to be of interest to others as well. I ...
0
votes
0answers
42 views

Preventing users removing managed accounts

I've been using Android For Work (Google Admin) for a while now and I'm fairly happy with its range of policies available. Some of the main policies I've been applying for enrolled devices are ...
0
votes
1answer
111 views

Prevent USB data transfer (when phone is in use) and being charged

I would like to know how to protect my data when I use public battery charger in public places. I know that if I do not unlock my screen when charging, my data is safe, but what if I would like to ...
3
votes
2answers
122 views

Does using various app stores in parallel cause any issues?

I am using a Android phone with Lollipop and found that apps can be installed from various app stores like Google Play, Amazon App Store or F-Droid. Are there any problems I can run into if apps are ...
5
votes
2answers
974 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
0
votes
0answers
22 views

Is 4,294,967,295 the conceptual limit of apps installable to a android device? [duplicate]

This is a somewhat conceptual question. I know that other limits (i.e. like memory limit the number apps installed much more). Question According to the security guide of android.com sandboxing (and ...
0
votes
0answers
90 views

How to Implement fix for Samsung's CVE-2015-7888 in CM13

I run the security checkup of DuoSecurity lab here. They say my phone has the vulnerability CVE-2015-7888 in Samsung Galaxy S4 GT-I9506 which is using CyanogenMod 13. CVE-2015-7888 Remote Code ...
3
votes
2answers
5k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
13
votes
2answers
618 views

Does full device encryption protect my data from Google and the government?

Apple recently made waves within the tech community by refusing to comply with law enforcement in regards to accessing encrypted user data. Their statement was that they do not have the technical ...
4
votes
1answer
96 views

Joining a public WiFi made the owner able to send me a Facebook friend request. How?

I walked by a bar with free, unsecured WiFi. My device auto-joined it, and a minute later I had a friend request on Facebook from that very bar. How did they get my Facebook identity just from ...
6
votes
1answer
636 views

How to get the latest security updates for CyanogenMod?

I have installed CyanogenMod in February 2016, and the device information showed Android version "5.1.1", and the security patch level was "November 2015". This hasn't changed until today ...
0
votes
0answers
75 views

How to show SSL fingerprint of a self-signed certificate in Firefox for Android

I set up a website with a self signed SSL-certificate. As this website is just used by me for now, I'm fine with checking the fingerprint when connecting to it. This works just fine with Firefox or ...
0
votes
0answers
20 views

Is it possible to require “initial unlock” for smart lock

Is it possible to enforce initial unlock while using smart lock? For example, I'm using smart unlock with "Trusted places" and I would prefer it didn't automatically unlock when I get in range of my ...
0
votes
1answer
41 views

To configure tethering as two step login?

I have given my password of wifi stations to group of people. However, I want to allow only specific people to login at specific time. Attempt I could not enable a basic MAC filtering for devices. ...
6
votes
3answers
63k views

How do I decrypt files on my SD card that I encrypted using the Settings?

I have files that I used to copy from my SD card to my PC using the USB Mass Storage option under the "USB connection" pop-up. I checked the flag under Settings->Location & Security->Data ...
0
votes
0answers
19 views

marshmallow and personal security/privacy [duplicate]

I've been reading the news in the US about a court order for Apple to help the FBI bypass the security check present on devices running iOS8+. Since iOS8, Apple has stopped storing encryption keys on ...
0
votes
1answer
59 views

Famoc & KNOX on Samsung XCover 3

I have a problem, I have a phone with Famoc & KNOX enterprise security applications. I was able to root the device with Odin, I've installed twrp-2.8.7.0 & SuperSu. I've removed this Famoc ...
-2
votes
2answers
2k views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
0
votes
1answer
51 views

What can be accessed if phone is lost?

If a phone has not had its bootloader unlocked, has not been rooted, has a finger print lock as well as a pin lock if the fingerprint lock doesn't work. How much can a thief access on the phone? Will ...
10
votes
1answer
501 views

Why is fingerprint lock considered less secure than pattern lock on Nexus 5X?

My Nexus 5X highly recommends to set up pattern lock in addition to fingerprint lock, and the pattern is asked upon every reboot. And my password manager (KP2A) recommends to use fingerprint unlock ...
0
votes
0answers
33 views

What does stop somebody from flashing a custom recovery and pulling all user data?

For example, I was able to install a Clockworkmod recovery on my Samsung Galaxy Ace 3 phone via Odin and back up all the data in a few clicks. But if I could do it, what would stop somebody else who ...
3
votes
1answer
51 views

Protect from theft at flash level

There are a lot of apps that could block your phone in case of theft, take picture of thief remotely and such, but in case of reset any of this security methods will be useless So I was wondering if ...
15
votes
3answers
12k views

How would you uninstall a rogue Home (Launcher) application?

If you were to install a Home Screen application that does not give you access to the System Settings screen (to go to Manage Applications), and also does not let you launch Apps (such as the Market ...
2
votes
1answer
184 views

Can't remove stolen phone from account

So I had an Android phone stolen - nearly two years ago now. When it was taken, I immediately reset my Google account password (and most others). I have 2-factor auth on my Google account. I have ...
0
votes
0answers
24 views

Custom ROM - easiest way to default to functional adb

When building a custom ROM (or for that matter, modifying existing) - what's the best way to make sure that the OS starts up with adb-USB enabled, and with the host's key already accepted?
0
votes
1answer
38 views

Keeping forensic cops out

I was just arrested and bonded out immediately. my phone was confiscated. It was an Android and is there anything I can do to keep them from accessing the contents of my phone? Would deleting my ...
4
votes
3answers
13k views

Preventing browser redirects on Android (and iOS)

There seems to be an issue occurring with mobile browser apps on Android and iPhone being redirected to advertising sites. This is interrupting the browsing experience. The problem: A user visits a ...
1
vote
1answer
188 views

Phone number detected by a web page when browsing from chrome for android

I recently got subscribed to some alerts by the mobile provider automatically and some amount deducted from my phone balance. I called up the customer care centre and they agreed to refund the amount, ...
1
vote
0answers
63 views

How to hide winrar or other apk files in general?

I have stored some important files in my android phone in rar format. I've hidden these files in .nomedea folder. I've also enabled password for these files via win rar. The problem is for opening ...
2
votes
0answers
153 views

How to use network interface as non-root user?

I want to communicate between my Android device and my Linux box over IP through the USB network interface mode. The device I'm using is a OnePlus One running CM12.1 nightly builds. It's rooted and ...
1
vote
0answers
521 views

Android 5.1 update, Motorola X (1st Gen) and “Skip” NFC tabs (Really: disable “swipe” step before unlock)

I've just upgraded my gen 1 Moto X to 5.1. I've managed to get the NFC "Skip" tabs working again to unlock the phone, but the overall behavior is worse than with the prior release. Before 5.1, when ...
20
votes
3answers
21k views

List of open ports on Android

Is there a way, on a non-rooted Android device, to see a list of what apps are listening on what port? Or even a way to see if an app is listening on a specific port?