For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

7
votes
1answer
204 views

Does the Secure Random bug affect apps besides Bitcoin?

The Bitcoin Project recently announced a bug in the SecureRandom implementation on Android, which caused Bitcoin wallet apps to generate weak private keys that leave bitcoins vulnerable to theft. The ...
7
votes
2answers
930 views

I lost my Android smartphone. Play Store tells me that someone has inserted a SIM card. How can I find out the phone number?

I lost my Samsung Galaxy S, which was signed into Google Play. Now, Play Store has identified that someone has inserted another SIM card with a different service provider. Is there anyway I can find ...
7
votes
1answer
407 views

What's the difference between the various lost phone apps?

I want to get a security app for my phone. I mostly need something in case my phone gets lost or stolen. Researching this I have found several apps: iTag WaveSecure LookOut I am sure there are ...
6
votes
3answers
52k views

Logout from Gmail on my device

It bothers me that my Android Phone is permanently logged into my Gmail account. I want to logout from the device and somehow make the phone ask for username/password when connecting to my account. ...
6
votes
2answers
4k views

Apps install on their own

Every night for the past few days my phone installs a new app that I never saw/wanted/heard of before. It all started with AppCaster (Which I never installed on my phone, it just showed up one ...
6
votes
1answer
293 views

Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?

As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
6
votes
3answers
93k views

How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?

There are a load of sites that do this now, and it's really annoying: I visit a content site on my Android device. 10-15 seconds after loading starts the site hangs for a few seconds. Google play ...
6
votes
2answers
3k views

WiFi Hotspot Security?

Is there any way to add extra security to a WiFi hotspot created by an Android phone? I am using a Samsung GT-S5300 with Android 2.3.6, and I am using the WiFi hotspot feature at home since Telkom ...
6
votes
4answers
9k views

Forgot security lock pattern on Jelly Bean device with Wifi and 3G data turned off

I forgot my security lock pattern and my Wifi and 3G connections are switched off. I can hard reset the phone (Galaxy Nexus) from recovery mode, but that would wipe all my data. ADB is also turned off ...
6
votes
2answers
2k views

Google two-step authentication and Android lock screen

After many failed screen unlock attempts, the user is required to enter the Google account password. That's a good idea. But what if I enabled Google's two-factor authentication, and then entered the ...
6
votes
3answers
3k views

Can a thief unlock or otherwise access the data on my stolen Android device?

If my Android device is stolen, will the person who ends up with it be able to get my data by plugging it into a PC and using some trick? Is there anything I can do to prevent this or make it harder?
6
votes
4answers
12k views

How can I disable or password protect my device's 'factory reset' function?

Is there any way to prevent a factory reset, like password protection? I would basically like to protect my phone from resetting if it gets stolen.
6
votes
1answer
242 views

Can my Google Docs app be secured?

I have sensitive information in my Google Docs. I enabled two-step verification with my Google account; but just noticed that Google DOCS on my phone doesn't require any type of PIN number or ...
6
votes
1answer
7k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
6
votes
1answer
486 views

Can Applications With Root Access Modify Their Own Permissions?

For rooted phones, there are several apps which require root privileges. Knowing this, the user does allow the app to get root. Now, the app would have been installed with a set of x permissions, say ...
6
votes
2answers
148 views

How safe are my passwords at after-sales service?

My phone is currently inoperative. Samsung asked me to drop it at an approved repair center, which will handle shipment and reception to/from Samsung. Being unable to boot my phone, it was impossible ...
6
votes
1answer
119 views

Secure keyboard application from android market

Is it safe to install a keyboard application from android market that asks full internet access permission? Will it not lead to certain security risks? There are several free and paid keyboards that ...
6
votes
1answer
823 views

Can I get a notification of failed WiFi connection for secured network?

I have an HTC Hero running Android 2.1. My work has a secured wifi network that we're allowed to connect our phones too. We also have to change our account passwords every so often. When this happens, ...
6
votes
1answer
327 views

Setup Tor server on my Android

How do I setup a Tor server on my Android tablet? I can install the Orbot client, but how do I contribute to the tor network? I have my tablet on a WiFi the most of the day so it would be nice to ...
6
votes
3answers
3k views

Is there an Android calendar with limited security permissions?

I've just bought an entry-level Samsung Europa, running version 2.2. I'm technically-minded but new to this OS. I'd like to find a calendar that runs in limited security permissions, so that my ...
6
votes
1answer
2k views

Why do App Locker apps need so many permissions? Am i safe?

I've been trying to password protect an app, and it seems that the permissions vary from app to app for App Lockers. Why do so many of them require full phone access? Is there any danger if i use a ...
6
votes
2answers
824 views

How secure are the “app password protection” apps?

I know there are a number of apps available that can password protect specified apps. I want to know how secure they really are. As far as I know, there aren't any exposed OS hooks in android to ...
6
votes
3answers
7k views

Android 4 USB charge only

When I connect my Android 4 phone (Galaxy Nexus) to a computer using USB, the storage of the phone is automatically mounted on the computer. How can I connect my phone using USB for charging only? In ...
6
votes
3answers
2k views

Android Password Recovery + 2 Step Auth. What happens?

I recently enabled two-step auth for my Google account, and I'm happy to say it works fine. However: Application specific passwords, like for Android are temporary, and the guide makes it obvious ...
6
votes
2answers
3k views

OpenVPN with Android 2.3.x - security concerns

I need to use my Android 2.3.x phone to access an OpenVPN server. I have CM 7 with built in support for OpenVPN and tun. My main concern is that I don't know where to put the keys in. If my phone gets ...
6
votes
1answer
1k views

Is there an official dialer code resource?

There are a ton of XDA forums and a decent number of answers here that refer to specific dialer codes. For instance *#*#4636#*#* will cause unicorns to spring forth from your phone or tell you what OS ...
6
votes
1answer
158 views

How do Android devices receive security updates?

I'm new to Android and I'm thinking about buying an entry-level Android device. Yesterday I read that Android passwords are stored in plain text. That got me to thinking... how do Android devices get ...
5
votes
2answers
3k views

How to connect ADB over 3G/4G? Or how can an ADB listener over network vulnerability be leveraged over GSM?

I keep seeing warning signs about enabling ADB over Network when you aren't connected to a WiFi network, but what if I want to connect ADB over 3G/4G ? Whenever I try to do it with any of the ...
5
votes
2answers
2k views

Looking for Location-Specific Screen Locking Behaviour

I'd like to have a feature that allows my Android phone to change its lock mechanism automatically dependent on location. For example, most of the time I use pattern unlock when out and about but ...
5
votes
2answers
3k views

Restricting Web Access to a single domain on Android tablets?

Our sales team came to me earlier with a question about Android OS. I've never used Android, but I do know it is a Linux-based OS. Frankly, I don't have the time to research for myself the ...
5
votes
3answers
808 views

Are there any good firewalls available? [closed]

Does the android platform have any firewall application?
5
votes
2answers
806 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
5
votes
3answers
161 views

Is there a standard place for the Owner Information on an Android phone?

I found an lost Android phone - is there a standard place on Android phones for owner information so I can contact the person who lost it?
5
votes
1answer
2k views

How secure is a sim lock?

I have sim lock enabled on my sim, so basically, if I put my sim in another phone or if I restart my phone, I need to enter the sim lock pin. How easy is it to crack the sim lock if a theif got hold ...
5
votes
3answers
634 views

Is a PIN lock screen inherently more or less secure than an app lock program?

The two ways I see to secure an Android phone is through a PIN lock screen or through an app lock program (Password is too inconvenient and pattern is insecure for various reasons). The lock screen ...
5
votes
3answers
398 views

Is there an Android app that scans a device for vulnerability issues?

Is there an application that scan the phone or the phone image searching for vulnerability issues? In the internet there are several tools that make Network scanning, but I found nothing specific for ...
5
votes
2answers
343 views

In general, do Android apps use encrypted connections? If so, is public WiFi safer?

I know that connecting to public WiFi carries risks. I know that much of the risk has to do with sending data over a public connection, allowing it to be intercepted. So, my question is, do most ...
5
votes
1answer
5k views

Can I lock the Nexus 4/7 bootloader after flashing a non-stock ROM?

I know that doing a fastboot oem unlock will both unlock the bootloader and wipe the data on the device. Unfortunately, while this allows me to install a non-stock ROM like Cyanogenmod, my ...
5
votes
2answers
145 views

A Windows PC software is pushing its app onto my android devices. How can I avoid it?

This weekend I installed a popular Windows antivirus in my PC laptop. The installer offered the android app, and I denied it. Nonetheless, a couple hours later all my android devices had the ...
5
votes
2answers
102 views

Is there a way to wipe a device based on a certain password? A like a “Wipe-me” password?

Is there a way (an app perhaps) that will wipe a phone if a certain password is entered at the lock screen? For example "letmein" unlocks the phone, but if you enter "wipeme" it will start the factory ...
5
votes
3answers
16k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
5
votes
1answer
11k views

LogMeIn Hamachi VPN

How do I connect my Android phone or tablet to a LogMeIn Hamachi VPN? Is it even possible? LogMeIn has command line clients for Linux, and of course Android has built-in VPN settings. Is there some ...
5
votes
2answers
1k views

Encryption of offline mail, calendar, contacts data on Android

I'm very new to Android and I wonder what I can do in terms of encryption. As I read it seems that only Android >= 2.3.3 supports encryption but my new device will be running Android 2.3.1. So I ...
5
votes
1answer
111 views

On the latest version of Android, how can I disable Google Chrome's incognito mode?

Google Chrome for Android includes a feature called incognito mode. This feature, when I activate it, is designed to help prevent Chrome from automatically remembering and storing information about ...
5
votes
1answer
223 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
5
votes
2answers
6k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
5
votes
2answers
347 views

How to prevent tracking or hacking of a used phone

The used phone's IMEI is clean, so it's not stolen. Looks like its seller did a factory-reset before selling it. But how do I make sure that it doesn't have any malware or backdoors, and that its ...
5
votes
1answer
197 views

USSD attack official notification

I have an HTC that is vulnerable to USSD attack. I am trying to tell the HTC helpdesk about this issue, but they tell me that unless there is an official news from android team about this, they will ...
5
votes
3answers
41k views

How do I decrypt files on my SD card that I encrypted using the Settings?

I have files that I used to copy from my SD card to my PC using the USB Mass Storage option under the "USB connection" pop-up. I checked the flag under Settings->Location & Security->Data ...
5
votes
2answers
739 views

Stop droid x from security locking during a call

I have noticed that when I am on a lengthy call on my Droid X, the phone locks itself. This seems to happen within the expected timeout period, so I don't believe that the phone is malfunctioning. ...