For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

10
votes
7answers
10k views

Security options grayed out

I have my mobile phone (Samsung Galaxy S2) running on ICS. Recently I activated Microsoft Exchnage ActiveSync to connect to my corporate email. It disabled all the security options like 'Pattern ...
10
votes
2answers
8k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
10
votes
2answers
260 views

Does the official Google Plus Android client use HTTPS for automatic photo upload?

I'm at a conference using their (open) wifi. Normally I don't bother to tunnel my connection because I figure anything I care about (email, banking, etc.) goes over SSL/HTTPS anyway. It occurred to ...
9
votes
1answer
837 views

Deny the installation of apps or add new accounts (kiosk mode)

I have a tablet that I want to give to people to go on the internet, but I don't want them to mess with it (install/unistall apps, add new accounts, change relevant options, etc). Is there a way to ...
9
votes
3answers
3k views

deactivate PIN-request after airplane mode

When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
9
votes
1answer
3k views

Child-proofing an Android phone?

Is there a way (an app, or a special launcher, a set of apps with instructions) that allows turning an Android phone into a child-proof "only call parents" one? Here are my main requirements (and ...
9
votes
2answers
793 views

Security risks of “Open Wi-Fi Networks”

How paranoid do I need to be about allowing my phone to connect to open/unencrypted WiFi hotspots? I don't really care if other people see my data (email being received or sent, stock quotes, ...
9
votes
2answers
13k views

Why does Android prompt me with “Enter the credential storage password” when I attempt to connect to a secured WiFi network?

When I connect my iPhone to a secured WiFi network (at work), I'm prompted for my Username and Password. (And then I'm prompted to accept what I presume is an SSL certificate.) But when I select the ...
9
votes
3answers
465 views

Prevent entering PIN code before lockscreen

I have a Samsung Galaxy Mini. I'd like to know if it is possible to prevent the user from entering the PIN code before unlocking the normal pattern, since it recently happened to me that someone got ...
9
votes
4answers
9k views

Certificate Install without mandatory PIN lockscreen

Google Support says: The type of lock that's acceptable may be predetermined by your system administrator. Where I can define what's acceptable? I can regenerate the certificate if needed. So ...
8
votes
6answers
2k views

App/shortcut to quickly change screen lock type?

Two scenarios: I'm at a "trusted" place, and don't want to enter unlock password/pattern all the time I'm at an "untrusted" place and want my phone to be password/pattern screen locked is there ...
8
votes
5answers
660 views

How to improve the security on my Android phone?

When I use Android in business I have some secret data on my phone. So if I lose my phone this can easily be stolen. Is there any way I can secure my phone? E.g. adding password for unlocking it. Any ...
8
votes
4answers
3k views

Remotely brick a stolen phone

If my phone is lost or stolen, can I remotely and permanently brick my phone. This way, not only is my data secure, but the resale value of the phone plummets to zero. Tangential question: can apps ...
8
votes
2answers
243 views

Android and antiviruses

This is actually three questions: Are anti-viruses needed for smartphones running Android OS? Is the Android Market absolutely safe (because all precatuions are taken by Google to prevent any ...
8
votes
2answers
8k views

Connecting to VPN forces having secure screen lock [duplicate]

Possible Duplicate: Transformer Prime, VPN and password protection I noticed that creating a VPN connection in ICS forces me to use a secure screen lock. I want to have Slide method for my ...
8
votes
2answers
424 views

Formatting Android storage “zero out” technique

I have an Android mobile (Galaxy S3), and am really worried that my corporate information will be retrieved after a reset. I've seen shared video showing it is possible to recover data after hard ...
8
votes
1answer
8k views

Turning on encryption for an Android 4.0 device

I need to encrypt my full file system on Android device. From this link, I understand that Android provides support to enable full file system encryption based on a password but that need to be ...
8
votes
2answers
5k views

Can Android phones be set to automatically wipe all data after a certain amount of failed logins without an app?

A new policy at my work is being drafted regarding email access on phones. A requirement will be that the phone must automatically have all data erased after a certain amount of failed login attempts. ...
8
votes
3answers
2k views

How to remotely log out all web-based Gmail sessions from my Android phone

Can I remotely sign out all web sessions of Gmail from my Android phone? This question explains how to do this from the Gmail website with a standard web browser. This doesn’t work from my phone ...
8
votes
3answers
2k views

Biometric-security lock-screen?

Is there a way to apply a biometric lock (as in, a look screen) to an Android device? e.g. the unlocker has to pass a fingerprint / retina / voice scan. I've read about startup companies and general ...
8
votes
3answers
5k views

Force VPN usage?

On an android phone, stock or modded rom, is it possible to force the use of VPN? E.g. only allow traffic tunneled by VPN, don't allow traffic without using VPN to make sure that no unencrypted ...
8
votes
1answer
4k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
8
votes
3answers
3k views

IMEI number publicly displayed whenever connected to Wifi

I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...
8
votes
2answers
390 views

What is the best pre-stealing practice? [duplicate]

Possible Duplicate: Is there a way to block access to or wipe my Google data for a lost/stolen phone I would like to know what is the best/recommended practice to prepare myself to the day ...
7
votes
3answers
574 views

How do permissions work in the Android Market?

I've been told that the permissions for an app are there to inform me the types of things the app has permission to do. If this is right, can a developer 'forget' a permission and get away with using ...
7
votes
3answers
283 views

Protection from Malicious Intent

Is there an app, or will Google produce a system, where I can protect my Android device? Imagine a soundboard app that's free, but it asks for your contact information. The average user might be ...
7
votes
3answers
277 views

Is it possible to track what information on your phone an app is uploading?

If you are concerned about what information an app is sending about you (your privacy concerns) is there any way of tracking this? Can you see if an app is sending photos on your phone? Can you see if ...
7
votes
3answers
4k views

How to delete a specific file in Android so that it can't be recovered?

From my experience a file deleted from a computer filesystem can often be recovered unless it is overwritten with a special program (that's usually called "shredding"). Is an Android-based HTC ...
7
votes
2answers
206 views

Where should I submit bug reports for the pattern lock?

I believe i found a bug with the pattern lock. Where should I submit bug reports for the pattern lock? Note: this might just be a Sense thing: Create a pattern lock. Lock phone. Wake phone draw ...
7
votes
2answers
2k views

Open source / trusted rooting app for Android / Motorola Defy?

I found a lot of compiled rooting exploits for Android, but not a lot of source code. So, how can I trust an exploit able to take SU rights on my mobile device? How can I be sure there is no ...
7
votes
3answers
307 views

How can I prevent android apps from reformatting my SD card?

I have a 32GB micro SD card, and some of the apps I use state that they have permsisions to modify sd card memory. I have a lot of personal files on my card, and the other day, some app, I don't know ...
7
votes
3answers
530 views

Call Encryption

Is it possible to encrypt calls on Android OS? How do I do that?
7
votes
1answer
3k views

I changed my sim card - how do I find which app is sending sms messages to my old number?

I recently traveled to another country and I'm using a local prepaid sim card on my Galaxy S2. My prepaid credit was depleted rather quickly, and when I checked the phone record I found out my phone ...
7
votes
2answers
719 views

Security / Privacy concerns regarding custom android ROM

What are the security and privacy concerns surrounding using a custom android ROM like that of cyanogen?
7
votes
3answers
1k views

Any hack to get rid of the “Too many password attempts” lock?

My kids often play with my phone which has a pattern lock screen, and it gets locked due to many attempts, then the phone is locked out and requires a password. I use 2-step verification, so in ...
7
votes
3answers
194 views

Is there a service that rates app security/permissions?

Is there a service/company/app that vets Android apps and reports on their "trustworthiness"? I recently moved from Blackberry to a Galaxy S2 which does not have an LED indicator light. I searched ...
7
votes
2answers
880 views

How can I securely store my private key I use for logging into my home PC

I've been told that the SD card is a terrible place to store secure data because any app can read it. How else can my phone store my private key I use to log into my home PC ssh server?
7
votes
1answer
1k views

Full encryption with Android?

I have an LG GT540 Optimus with Android. How can I encrypt all my filesystems to ensure that if it gets stolen, no one will get my passwords, contacts, etc.. :\ ? Thank you!
7
votes
1answer
152 views

Does the Secure Random bug affect apps besides Bitcoin?

The Bitcoin Project recently announced a bug in the SecureRandom implementation on Android, which caused Bitcoin wallet apps to generate weak private keys that leave bitcoins vulnerable to theft. The ...
7
votes
2answers
730 views

I lost my Android smartphone. Play Store tells me that someone has inserted a SIM card. How can I find out the phone number?

I lost my Samsung Galaxy S, which was signed into Google Play. Now, Play Store has identified that someone has inserted another SIM card with a different service provider. Is there anyway I can find ...
7
votes
1answer
394 views

What's the difference between the various lost phone apps?

I want to get a security app for my phone. I mostly need something in case my phone gets lost or stolen. Researching this I have found several apps: iTag WaveSecure LookOut I am sure there are ...
7
votes
1answer
137 views

Locking down an Android device?

I'm interested in locking down an Android, so the user can only access a particular app (bonus points: only allow them to access the browser app, and only allow one website from within that). How ...
6
votes
2answers
1k views

Can my Android phone be hacked without installing permissions?

After reading this article ( Kaspersky smartphone report ) this got me wondering. Obviously if I install a dodgy app through Play Store or directly from a website, that can be dangerous, however if I ...
6
votes
2answers
165 views

Are firmware updates secure?

Now that mobiles are being used for payment systems, I'm more concerned about the security on my Android device. I would rather not be the first to be vulnerable to some malicious code that happened ...
6
votes
1answer
274 views

Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?

As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
6
votes
2answers
2k views

WiFi Hotspot Security?

Is there any way to add extra security to a WiFi hotspot created by an Android phone? I am using a Samsung GT-S5300 with Android 2.3.6, and I am using the WiFi hotspot feature at home since Telkom ...
6
votes
4answers
6k views

Forgot security lock pattern on Jelly Bean device with Wifi and 3G data turned off

I forgot my security lock pattern and my Wifi and 3G connections are switched off. I can hard reset the phone (Galaxy Nexus) from recovery mode, but that would wipe all my data. ADB is also turned off ...
6
votes
2answers
13k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
6
votes
2answers
1k views

Google two-step authentication and Android lock screen

After many failed screen unlock attempts, the user is required to enter the Google account password. That's a good idea. But what if I enabled Google's two-factor authentication, and then entered the ...
6
votes
3answers
2k views

Can a thief unlock or otherwise access the data on my stolen Android device?

If my Android device is stolen, will the person who ends up with it be able to get my data by plugging it into a PC and using some trick? Is there anything I can do to prevent this or make it harder?