For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

12
votes
4answers
22k views

Is there any WEP cracking application available for android?

Is there any WEP cracking application available for android? If not is WEP cracking technically possible with the API's and hardware available on your average android phone? This is a purely ...
12
votes
1answer
43k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
12
votes
2answers
604 views

Does full device encryption protect my data from Google and the government?

Apple recently made waves within the tech community by refusing to comply with law enforcement in regards to accessing encrypted user data. Their statement was that they do not have the technical ...
12
votes
2answers
5k views

How can I make my phone/tablet ring remotely without a SIM card?

I appear to have lost my Streak somewhere in my apartment, and I can't call it since I don't have a SIM card in it. I've remotely installed Plan B just because, but unfortunately the GPS coordinates ...
11
votes
2answers
897 views

Which disk encryption standard is used in Honeycomb?

Does anyone posses an official or un-official information on which encryption standard is used in Honeycomb "encrypt tablet" option? Is there an information on any hacks or backdoors, placed for law ...
11
votes
2answers
384 views

How can I require the pattern unlock only for specified times

Is it possible to require the pattern unlock only during certain times? For example, while I'm at work, I don't want to require the pattern unlock, however, anytime I'm not at work I do. Is this ...
11
votes
3answers
543 views

SwiftKey gets removed as input method after every update

Every time SwiftKey gets updated it is removed from the list of input methods. I don't remember having this problem before Android 4.4, but in the last few days SwiftKey had some updates and it just ...
10
votes
1answer
410 views

Why is fingerprint lock considered less secure than pattern lock on Nexus 5X?

My Nexus 5X highly recommends to set up pattern lock in addition to fingerprint lock, and the pattern is asked upon every reboot. And my password manager (KP2A) recommends to use fingerprint unlock ...
10
votes
5answers
9k views

Disable ActiveSync Remote Wipe in Froyo

In short: Is there a way to disable remote wipe for Android Phones (specifically in Froyo)? Background: I recently upgraded my G1 to a G2, and was about to set up my company e-mail account. But the ...
10
votes
1answer
4k views

How does android transfer with bump apps work?

I've come across several apps which allows the user to transfer data (like files, photos, contacts) when they "bump" their phones. An example is Bump, which use the the bump to transfer files and add ...
10
votes
2answers
9k views

Can Android phones be set to automatically wipe all data after a certain amount of failed logins without an app?

A new policy at my work is being drafted regarding email access on phones. A requirement will be that the phone must automatically have all data erased after a certain amount of failed login attempts. ...
10
votes
3answers
15k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
10
votes
3answers
21k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
10
votes
1answer
6k views

On Android, how can I disable Google Chrome's incognito mode?

Google Chrome for Android includes a feature called incognito mode. This feature, when I activate it, is designed to help prevent Chrome from automatically remembering and storing information about ...
10
votes
2answers
298 views

Does the official Google Plus Android client use HTTPS for automatic photo upload?

I'm at a conference using their (open) wifi. Normally I don't bother to tunnel my connection because I figure anything I care about (email, banking, etc.) goes over SSL/HTTPS anyway. It occurred to ...
10
votes
0answers
266 views

Canonical explanation of Android Encryption and Vulnerabilities

Note: Well, the bounty expired and one possible reason could be effort required to address as I gather from comments. Seeing the number of upvotes, it appears to be of interest to others as well. I ...
9
votes
6answers
4k views

App/shortcut to quickly change screen lock type?

Two scenarios: I'm at a "trusted" place, and don't want to enter unlock password/pattern all the time I'm at an "untrusted" place and want my phone to be password/pattern screen locked is there ...
9
votes
2answers
2k views

Open source / trusted rooting app for Android / Motorola Defy?

I found a lot of compiled rooting exploits for Android, but not a lot of source code. So, how can I trust an exploit able to take SU rights on my mobile device? How can I be sure there is no ...
9
votes
1answer
2k views

Deny the installation of apps or add new accounts (kiosk mode)

I have a tablet that I want to give to people to go on the internet, but I don't want them to mess with it (install/unistall apps, add new accounts, change relevant options, etc). Is there a way to ...
9
votes
3answers
6k views

deactivate PIN-request after airplane mode

When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
9
votes
1answer
5k views

Child-proofing an Android phone?

Is there a way (an app, or a special launcher, a set of apps with instructions) that allows turning an Android phone into a child-proof "only call parents" one? Here are my main requirements (and ...
9
votes
3answers
128k views

How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?

There are a load of sites that do this now, and it's really annoying: I visit a content site on my Android device. 10-15 seconds after loading starts the site hangs for a few seconds. Google play ...
9
votes
2answers
934 views

Security risks of “Open Wi-Fi Networks”

How paranoid do I need to be about allowing my phone to connect to open/unencrypted WiFi hotspots? I don't really care if other people see my data (email being received or sent, stock quotes, ...
9
votes
3answers
15k views

Why does Android prompt me with “Enter the credential storage password” when I attempt to connect to a secured WiFi network?

When I connect my iPhone to a secured WiFi network (at work), I'm prompted for my Username and Password. (And then I'm prompted to accept what I presume is an SSL certificate.) But when I select the ...
9
votes
2answers
2k views

Can I recall a command to reset a lost phone?

Last night I lost my Nexus 7 coming back from a friend's house. Since it has a lot of confidential work email on one account I logged into the Android Device Manager and - when it didn't show up - set ...
9
votes
3answers
716 views

Prevent entering PIN code before lockscreen

I have a Samsung Galaxy Mini. I'd like to know if it is possible to prevent the user from entering the PIN code before unlocking the normal pattern, since it recently happened to me that someone got ...
8
votes
5answers
757 views

How to improve the security on my Android phone?

When I use Android in business I have some secret data on my phone. So if I lose my phone this can easily be stolen. Is there any way I can secure my phone? E.g. adding password for unlocking it. Any ...
8
votes
5answers
8k views

Remotely brick a stolen phone

If my phone is lost or stolen, can I remotely and permanently brick my phone. This way, not only is my data secure, but the resale value of the phone plummets to zero. Tangential question: can apps ...
8
votes
2answers
2k views

Can my Android phone be hacked without installing permissions?

After reading this article ( Kaspersky smartphone report ) this got me wondering. Obviously if I install a dodgy app through Play Store or directly from a website, that can be dangerous, however if I ...
8
votes
2answers
440 views

Android and antiviruses

This is actually three questions: Are anti-viruses needed for smartphones running Android OS? Is the Android Market absolutely safe (because all precautions are taken by Google to prevent any ...
8
votes
2answers
12k views

Connecting to VPN forces having secure screen lock [duplicate]

Possible Duplicate: Transformer Prime, VPN and password protection I noticed that creating a VPN connection in ICS forces me to use a secure screen lock. I want to have Slide method for my ...
8
votes
4answers
6k views

How to delete a specific file in Android so that it can't be recovered?

From my experience a file deleted from a computer filesystem can often be recovered unless it is overwritten with a special program (that's usually called "shredding"). Is an Android-based HTC ...
8
votes
2answers
36k views

How to unlock device when I forgot my password?

I've read Recovering from forgotten lock pattern which states that there is an option to disable the lock using my Google account information. However I did not noticed such an option when I entered ...
8
votes
4answers
18k views

How can I disable or password protect my device's 'factory reset' function?

Is there any way to prevent a factory reset, like password protection? I would basically like to protect my phone from resetting if it gets stolen.
8
votes
2answers
1k views

Formatting Android storage “zero out” technique

I have an Android mobile (Galaxy S3), and am really worried that my corporate information will be retrieved after a reset. I've seen shared video showing it is possible to recover data after hard ...
8
votes
1answer
13k views

I changed my sim card - how do I find which app is sending sms messages to my old number?

I recently traveled to another country and I'm using a local prepaid sim card on my Galaxy S2. My prepaid credit was depleted rather quickly, and when I checked the phone record I found out my phone ...
8
votes
1answer
9k views

Turning on encryption for an Android 4.0 device

I need to encrypt my full file system on Android device. From this link, I understand that Android provides support to enable full file system encryption based on a password but that need to be ...
8
votes
3answers
18k views

How to remotely log out all web-based Gmail sessions from my Android phone

Can I remotely sign out all web sessions of Gmail from my Android phone? This question explains how to do this from the Gmail website with a standard web browser. This doesn’t work from my phone ...
8
votes
1answer
9k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
8
votes
3answers
264 views

Is there a service that rates app security/permissions?

Is there a service/company/app that vets Android apps and reports on their "trustworthiness"? I recently moved from Blackberry to a Galaxy S2 which does not have an LED indicator light. I searched ...
8
votes
4answers
2k views

Biometric-security lock-screen?

Is there a way to apply a biometric lock (as in, a look screen) to an Android device? e.g. the unlocker has to pass a fingerprint / retina / voice scan. I've read about startup companies and general ...
8
votes
1answer
7k views

Can I lock the Nexus 4/7 bootloader after flashing a non-stock ROM?

I know that doing a fastboot oem unlock will both unlock the bootloader and wipe the data on the device. Unfortunately, while this allows me to install a non-stock ROM like Cyanogenmod, my ...
8
votes
1answer
1k views

Full encryption with Android?

I have an LG GT540 Optimus with Android. How can I encrypt all my filesystems to ensure that if it gets stolen, no one will get my passwords, contacts, etc.. :\ ? Thank you!
8
votes
3answers
9k views

IMEI number publicly displayed whenever connected to Wifi

I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...
8
votes
2answers
427 views

What is the best pre-stealing practice? [duplicate]

Possible Duplicate: Is there a way to block access to or wipe my Google data for a lost/stolen phone I would like to know what is the best/recommended practice to prepare myself to the day ...
8
votes
1answer
159 views

Locking down an Android device?

I'm interested in locking down an Android, so the user can only access a particular app (bonus points: only allow them to access the browser app, and only allow one website from within that). How ...
8
votes
1answer
5k views

How to export SSL certificate from Android, Chrome

I have a Nexus 5 with the latest Android 4.4.2. I'm registered on using Chrome . They use client certificates to authenticate the user. I installed the certificate and could successfully use the site ...
7
votes
3answers
599 views

How do permissions work in the Android Market?

I've been told that the permissions for an app are there to inform me the types of things the app has permission to do. If this is right, can a developer 'forget' a permission and get away with using ...
7
votes
2answers
213 views

Are firmware updates secure?

Now that mobiles are being used for payment systems, I'm more concerned about the security on my Android device. I would rather not be the first to be vulnerable to some malicious code that happened ...
7
votes
3answers
358 views

Protection from Malicious Intent

Is there an app, or will Google produce a system, where I can protect my Android device? Imagine a soundboard app that's free, but it asks for your contact information. The average user might be ...