For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
0answers
164 views

How can an organization control when or when not an update for an app is installed in their Android smartphones?

Imagine an organization that have a legitimate fear to automatic updates. That organization thinks that an automatic update may break a business use case. For example, when the VPN client is update ...
0
votes
0answers
36 views

Moving an app out of a myKNOX container

Is it possible to move an app back out of a myKNOX container? I have an app that I have written myself and loaded onto a samsung xcover3 via eclipse and a USB cable. I then installed myKNOX and ...
6
votes
3answers
9k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
2
votes
1answer
666 views

What data flows through AirDroid's servers?

When using AirDroid do your text messages and/or data get transmitted through AirDroid's servers or is that data kept locally between your Android device and your computer? My understanding is that ...
40
votes
1answer
26k views

How can I verify the authenticity of an APK file I downloaded?

The latest update of Google Maps is unavailable in my country, so I downloaded a version by googling for "Google Maps 5.4.0 apk". I did in fact find it, but now I wonder how I can tell if this is in ...
14
votes
3answers
36k views

How can I override the Device Administrator security policy so that I can disable the lock screen?

On Android 2.2 Froyo, I added my Corporate Exchange Email account to the phone, however, the security policy set by the "Device Administrator" requires that I enter a 4-digit PIN at the lock screen ...
-1
votes
1answer
39 views

Is it safe to use this app and will it cause problems in 6.0?

Classic Dialpad for KitKat and Lollipop Just wanted to check if there's any reason not to use this, here's what the permissions looks like. Click image to enlarge I'm assuming its just a ...
1
vote
1answer
2k views

How unlock S6 Edge When The Finger Print Scanner is Not Working?

My S6 edge was locked by finger print. It was working fine, but today while I was on bath my child was playing with my mobile and by mistake they tried finger print scanner, now my device is locked ...
3
votes
4answers
11k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
3
votes
2answers
5k views

Can applications be downloaded without a Google Account and without disabling security features?

If I wish to install applications such as Skype, DropBox, etc however without registering for a Google account, is that possible? If so, how do I install them without a Google account?
0
votes
1answer
572 views

is there a keylogger in my phone

I have an Android phone accent a400 and I sent it to a repair store to change the broken screen. After receiving the phone, I noticed that they did a reset to the phone and the internal memory doesn't ...
0
votes
0answers
154 views

Samsung KNOX equivalent for other device manufacturers

Are any other device manufacturers offering a samsung KNOX type solution? Maybe the other big players, i.e. Motorola, HTC or Sony have a similar technology available for securing their Android ...
6
votes
1answer
32k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
6
votes
2answers
4k views

How to connect ADB over 3G/4G?

I keep seeing warning signs about enabling ADB over Network when you aren't connected to a WiFi network, but what if I want to connect ADB over 3G/4G ? Whenever I try to do it with any of the ...
-1
votes
1answer
174 views

Unknown sources, root, and the Android security conundrum [closed]

This question has 2 aspects, both are related and equally important from a security standpoint: 1) The "Allow installations from unknown sources" option under Security settings. Most other mobile ...
23
votes
3answers
10k views

Does official Gmail app use a secure connection?

As simple as that, when I'm using the official Gmail app to access my email account, does it use a secure connection?
48
votes
14answers
13k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
0
votes
2answers
197 views

Does Android locally encrypt your fingerprint?

I got myself a Nexus 6P with a fancy fingerprint scanner. So far I'm a bit reluctant to use it because I can't find any info on how Android Marshmallow stores those fingerprints. Are they hashed (as ...
10
votes
3answers
15k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
20
votes
5answers
10k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
0
votes
1answer
52 views

Firefox for Android mysterious connections after turning everything off in settings

I created a user.js that incorporates support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections and other tweaks, yet Firefox for Android still attempts to connect to several ...
0
votes
0answers
40 views

Why sometimes my device doesn't try to recognize trusted face?

I set up trusted face in the smart lock security section of my Nexus 6. When I press power button in attempt to unlock my device usually I see a face/person symbol on the bottom of the screen, as a ...
2
votes
1answer
515 views

When you lock down a Lollipop device to disable Chrome's incognito mode, this creates an XML “restrictions file”. What actual XML is inside the file?

Note: If this post is too long to read, please see the summary in the last paragraph. I own an aging Samsung Galaxy S Relay cellphone. It's running Android 4.1.2 and has a built-in physical keyboard. ...
0
votes
1answer
79 views

Do devices with a fingerprint scanner prevent access to the bootloader/recovery

Pretty simple question but as I have never owned a device with a fingerprint scanner... basically I was wondering: If you secure your device with your fingerprint - is it possible to access the ...
0
votes
0answers
72 views

How to add private key to keychain in Android?

I do not want to type my passwords all the time, but instead, just the password to my private keys. I am using Samsung Galaxy 4 and Android 5.0.1. How can you add private key to your Android ...
0
votes
0answers
12 views

Two factor authenticator app which works when we lost our phone but able to use back same phone number

Currently, I'm using Google Authenticator in my phone. If I lost my phone, but able to get a new phone device, and use back my previous old phone number, will Google Authenticator continue to work? ...
0
votes
1answer
138 views

Calculator WiFi usage on Marshmallow, Nexus 5? What?

I have not used the calculator app. I also don't know why it would be using the wifi or any kind of external data. Yet behold, below: I flashed 6.0 recently and restored some apps from an old ...
19
votes
7answers
13k views

How to know if a side-loaded app is safe?

How can we be assured that the APK of an app that we are downloading from a website is safe to install on our Android phone? Is there a way to know that the downloaded file is safe? Is there an app ...
0
votes
0answers
25 views

Full encryption of a singe purpose device (e.g barcode scanner )

How could we run a single purpose device with high sensitive date on Android 4.4 or later, with full disk encryption and have it unencrypted and unlocked only after entering the device password only ...
1
vote
1answer
142 views

Is Snowden snowing us with his “Smurfs Suite” interview?

I hope this is not too off-topic. This morning when I read news it was full of articles quoting Snowden in his most recent interviews. Apparently the UK's GCHQ and the USA's NSA can (1) turn your ...
31
votes
3answers
61k views

Bypass “Swipe up to unlock” on Android Lollipop lock screen

I recently flashed my Nexus 4 to Android Lollipop using the factory image. I have set a pattern lock for unlocking the device. But whenever I turn on the phone, I have to click on the little lock ...
2
votes
1answer
28k views

What is YGPS and why does it have every permission that's in the book?

I have a FairPhone One. From time to time I look in the system settings and the battery usage to see what is draining the battery. I've disabled anything I don't use, including a number of builtins ...
0
votes
0answers
106 views

How to log all user interaction on my device?

I would like to know whether on an Android device it is possible to: Log the date and time of every time a password is entered on my Android phone (this security measure would mean that if someone ...
0
votes
0answers
16 views

How can I audit access to Android Accounts?

I want to audit the calls made to the Authentication Providers by connected applications. The reason is that I am investigating a rogue application that seems to collect more data and permissions ...
4
votes
3answers
193 views

How do I see if my Android Nexus received the latest security updates?

I'd like to check the patch level of my Nexus. I'm using Lollipop 5.1.1 build LMY48I. Under 'System updates' in 'About phone', it says 'Your system is up to date'. Should I assume that includes ...
1
vote
1answer
3k views

How to see the device list of a given Google account

I have many test Android devices and added my Google account to those device to reuse my application collection. Recently I often recieve payment notification via gmail for application which I really ...
0
votes
0answers
141 views

Why does AVG consider android keychain harmful?

I just got this Lenovo tab 2 A8. When I ran my first AVG scan, it pinpointed Keychain as a threat. What is Keychain? Is it necessary? If not, how do I get rid of it?
0
votes
0answers
53 views

Use and interpretation of AIMSICD

I just downloaded AIMSICD and I understand pretty much what it does but what am I looking for when reading its statistics, results and maps?
2
votes
2answers
231 views

How do I prevent unauthorized accession of my data when my phone is connected to the internet ?

I have an Android smartphone and my data connection is always enabled. I often use browsers like Opera Mini and UC Web as they are faster than the inbuilt browser apps. I often use Mobile banking ...
1
vote
0answers
55 views

Is there a way to use a phone as a virtual keychain for NFC tags?

So let's say I have a bunch of things that can be unlocked via NFC. Each thing would correspond with one tag and one tag only. The problem would then be that I'd have to carry a bunch of tags around. ...
0
votes
2answers
122 views

Accidentally i have uninstalled my home launcher

there is no launcher in my phone.i also switched off and switched on . it showed only samsung nothing else.My device was already rooted and i thought by factory data reset it would work but now i can'...
2
votes
1answer
116 views

Pop up about security problems

I had a lot of these pop ups and I don't know if it's for real or not.
23
votes
2answers
4k views

What Android sync'd data is encrypted?

With the release of the firesheep plug-in for firefox it has become trivial for website browsing on open Wi-Fi networks to be hijacked by 3rd party listeners. Android offers the convenient auto-sync ...
28
votes
1answer
23k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
0
votes
0answers
48 views

How to enable password entry for encrypted lollipop but disable built in screen locker at the same time?

I want this because I want to use a strong password to protect my device at boot time, but protect the screen with one time passwords when it is already turned on.
6
votes
3answers
187 views

security implications of participating in app beta testing? [closed]

I am an IT professional (but not in app development). Two days ago someone contacted me about a blog post I made and invited me to participate in beta testing for a messaging app which was related to ...
8
votes
2answers
449 views

Android and antiviruses

This is actually three questions: Are anti-viruses needed for smartphones running Android OS? Is the Android Market absolutely safe (because all precautions are taken by Google to prevent any ...
8
votes
5answers
760 views

How to improve the security on my Android phone?

When I use Android in business I have some secret data on my phone. So if I lose my phone this can easily be stolen. Is there any way I can secure my phone? E.g. adding password for unlocking it. Any ...
1
vote
0answers
127 views

Where does the “privacy protection password” come from?

I wanted to insert a second sim card in my Umi phone. From then onwards, it always asks me for this 'privacy protection password'. I can only insert numbers, not letters... so I'm very puzzled about ...
0
votes
0answers
54 views

How can I check in my Android has been compromised?

I noticed this morning that there was an email in my drafts folder. Inside, was some semi-gibberish text (a couple partial words crammed together). It was definitely not something I typed. I ...