For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

53
votes
6answers
18k views

My Gmail is signed in through the app on ex-boyfriend's phone

I had my email signed in on the Gmail app on my boyfriend's phone who is now on the other side of the country. I've asked him a couple times to disconnect it but recently checked out Google Play and ...
6
votes
1answer
184 views

Setup Tor server on my Android

How do I setup a Tor server on my Android tablet? I can install the Orbot client, but how do I contribute to the tor network? I have my tablet on a WiFi the most of the day so it would be nice to ...
1
vote
1answer
951 views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
3
votes
2answers
1k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
1
vote
1answer
196 views

What is the setting in xprivacy to access the microphone?

I use xprivacy to set all permissions on my phone, but I accidently forbid the tuner app to access my microphone. Which setting do I have to enable?
1
vote
1answer
96 views

How does Google find devices for Android Device Manager?

I've seen the news story a few weeks ago that Google has finally implemented a feature similar to Apple's Find My iPhone. The weird thing is that Google says that somehow magically all old devices ...
0
votes
2answers
71 views

Would it be possible to sandbox apps with SELinux?

Many apps require too much permissions that they do not need to function Most apps needs internet connection to talk to some API (let's say updates checking or notifications ..etc) and need to access ...
0
votes
0answers
29 views

Security of Android tethered hotspot

Basically each time I activate my phone's (Samsung S3 4.3 rooted) tethered Wi-Fi, to use the Internet on my iPad, someone can remotely connect and see what I'm doing. Even with WPA2 + strong ass ...
0
votes
1answer
1k views

I forgot my lock pattern, how do I reset it? [duplicate]

Possible Duplicate: Recovering from forgotten lock pattern I have a Toshiba Thrive Android Table and I forgot what I used as my pattern lock. How do I reset it? Someone please help!
20
votes
5answers
8k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...
5
votes
2answers
2k views

Restricting Web Access to a single domain on Android tablets?

Our sales team came to me earlier with a question about Android OS. I've never used Android, but I do know it is a Linux-based OS. Frankly, I don't have the time to research for myself the ...
5
votes
2answers
2k views

Looking for Location-Specific Screen Locking Behaviour

I'd like to have a feature that allows my Android phone to change its lock mechanism automatically dependent on location. For example, most of the time I use pattern unlock when out and about but ...
16
votes
1answer
834 views

Why can't a keyboard on the Samsung Galaxy S3 collect passwords?

When I enable an input method (a keyboard app) on a Nexus device, I see the following confirmation message: This input method may be able to collect all the text that you type, including personal ...
11
votes
4answers
3k views

Can my Android device become - remotely and without my permission - a wiretap and get used as surveillance device?

I saw the following article: An article in the Financial Times last year said mobile providers can "remotely install a piece of software on to any handset, without the owner's knowledge, which ...
2
votes
1answer
287 views

What is the mobile provisioning website supposed to do?

When I go to Settings → More... → Mobile plan it gives me a message "{mobile operator} has no known provisioning website". Digging into Android source code for WirelessSettings.java I found how URL ...
1
vote
0answers
50 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
2answers
168 views

Why does every application run as a separate user under Android?

If it's for security reasons, so that one application cannot harm another, why is it not like that in the desktop Linux distros? If desktop operating systems do prefer interaction between ...
7
votes
1answer
200 views

How to prepare myself & smartphone/tablet in the event it goes missing or is stolen?

I would like to know what measures or steps etc that should be performed, in order to protect & safeguard whatever "data" is on my Android Smartphone or Tablet, and indeed the device itself, in ...
0
votes
1answer
127 views

Mobile Lost and some one else is using the mobile with a different sim

I need help to track the person who has my mobile. My account(email) is still linked with google play on that mobile. I can install apps from my browser from google play account. Is there any app ...
3
votes
1answer
1k views

Is it possible to prevent the screen turning off when pressing the power button?

I run an app on my handset which really needs the screen to remain on for it to function properly. The app already seems to attempt to keep the screen on as the screen timeout seems to be disabled ...
6
votes
2answers
2k views

Google two-step authentication and Android lock screen

After many failed screen unlock attempts, the user is required to enter the Google account password. That's a good idea. But what if I enabled Google's two-factor authentication, and then entered the ...
0
votes
1answer
31 views

How i can protect my android from Master Key Vulneralability?

When i install apps ,that i take from my friends , it seems quite fishy , so how to check that the apps are trusted or not.
2
votes
2answers
126 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
1
vote
3answers
3k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
0
votes
0answers
46 views

What is custom URI handler in android?

I came across the term "Custom URI Handler" which is a bad practice in android security. Can anybody please tell what is custom URI handler? What are the security issues raised by custom URI handlers? ...
1
vote
1answer
60 views

What is master key vulnerability in android?

What is master key vulnerability in Android? From looking at a few different sites, I understand that it is bypassing the authentication provided by signing of apps. How can I detect an app is ...
0
votes
1answer
127 views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
-1
votes
1answer
104 views

wave hand & lock phone automatically

Is there any way to lock my Samsung Quattro (running Android 4.2) just by waving my hand upon it?
3
votes
1answer
1k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
0
votes
0answers
88 views

full-wipe and factory reset safety

Some days ago, I saw a TV show where some people bought used phones (in that case most of them was a Symbian phone). Using some software, they recovered most of data that was saved in, like facebook ...
1
vote
0answers
463 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
4
votes
1answer
975 views

Find lost device without Gmail account configured and without SIM card

I recently misplaced a phone that did not have gmail account configured and did not have a SIM card in it either. Is there any way I can track it ? All of the tracking apps either require sending an ...
1
vote
1answer
3k views

Android 4.1 unable to connect to Google Play but other wifi functions work - how to fix?

I'm using a Rikomagic 802III running Android 4.1.1, connected to my TV. Until today, I was able to connect to Google Play, and my widgets were showing data. Now, when I open Google Play, I get an ...
38
votes
10answers
9k views

Is there a way to block access to or wipe my Google data for a lost/stolen phone

If my phone was ever lost or stolen, my only real concern is data and apps associated with my Google account, such as my Gmail, the ability to purchase apps from the Market, and maybe Picasa albums. ...
1
vote
2answers
154 views

How can I control my phone remotely?

As a new Android user, this question has had me thinking quite a while. Is it possible to create an app or is there an app available that will do the following; Remote access to your device ...
0
votes
1answer
317 views

Locating a stolen phone with Android Device Manager

On the weekend I had a brand new phone stolen from me. It was out of battery at the time. I'm assuming whoever stole the phone has removed the SIM card and probably re-flashed it as it was locked. ...
5
votes
1answer
128 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
0
votes
1answer
266 views

Protecting my Google identity in case my Android device gets stolen?

My devices are all linked to my main Google account. This is encouraged, almost required, by Android, for example to make my Google Play apps available everywhere. However, it requires me to store my ...
21
votes
2answers
33k views

How is the Gmail password stored in Android - and where?

I have looked around and found no information on how Android manages to store passwords on the device. Especially Gmail passwords. I'm looking to learn how Android encrypts and stores passwords ? What ...
0
votes
0answers
60 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
12
votes
6answers
22k views

How do I avoid the server-specified security policies for my work e-mail?

When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?: I just received a Nexus 7 and signed ...
0
votes
0answers
264 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
2
votes
1answer
561 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
59 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
0
votes
0answers
813 views

How to auto unlock SIM/UICC on trusted devices?

I don't like manually entering PIN1 of SIM/UICC everytime I reboot my Android smartphone or switch SIM/UICC between multiple trusted devices. How to auto unlock SIM/UICC on my trusted devices? The ...
5
votes
3answers
156 views

Is there a standard place for the Owner Information on an Android phone?

I found an lost Android phone - is there a standard place on Android phones for owner information so I can contact the person who lost it?
2
votes
1answer
69 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
1
vote
0answers
155 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
4
votes
2answers
4k views

What causes the error “No certificate found in USB storage.” when trying to import a certificate?

I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
22
votes
5answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...