For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

2
votes
1answer
581 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
59 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
0
votes
0answers
826 views

How to auto unlock SIM/UICC on trusted devices?

I don't like manually entering PIN1 of SIM/UICC everytime I reboot my Android smartphone or switch SIM/UICC between multiple trusted devices. How to auto unlock SIM/UICC on my trusted devices? The ...
5
votes
3answers
156 views

Is there a standard place for the Owner Information on an Android phone?

I found an lost Android phone - is there a standard place on Android phones for owner information so I can contact the person who lost it?
2
votes
1answer
70 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
1
vote
0answers
170 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
4
votes
2answers
4k views

What causes the error “No certificate found in USB storage.” when trying to import a certificate?

I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
22
votes
5answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...
2
votes
1answer
2k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...
1
vote
1answer
131 views

How do I keep my email and passwords secure without full-device encryption?

I bought a cheap, no-name Android 4.1.1 tablet a while back, and was dismayed to find that the "Encrypt Data" option was simply not present in the "Settings" -> "Security" menu. I then upgraded to a ...
11
votes
3answers
4k views

How would you uninstall a rogue Home (Launcher) application?

If you were to install a Home Screen application that does not give you access to the System Settings screen (to go to Manage Applications), and also does not let you launch Apps (such as the Market ...
1
vote
0answers
424 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
18
votes
3answers
7k views

Does official Gmail app use a secure connection?

As simple as that, when I'm using the official Gmail app to access my email account, does it use a secure connection?
6
votes
3answers
5k views

Android 4 USB charge only

When I connect my Android 4 phone (Galaxy Nexus) to a computer using USB, the storage of the phone is automatically mounted on the computer. How can I connect my phone using USB for charging only? In ...
0
votes
1answer
159 views

Does a malicious android WebView break the DoubleSubmittCookie countermeasure against CSRF? [closed]

Initial situation: A RESTful webservice defends against CSRF attacks by using the double submit cookie approach. This means that the authentication token gets submitted twice and verified at the ...
1
vote
1answer
117 views

Delete Status bar Icon downloaded from web

I joined way2sms to send free SMS from my laptop. Now I find an app icon downloaded to my status bar in my Samsung Galaxy Y mobile. Also, I get debited for calls not made. I am losing money in this ...
8
votes
2answers
9k views

Connecting to VPN forces having secure screen lock [duplicate]

Possible Duplicate: Transformer Prime, VPN and password protection I noticed that creating a VPN connection in ICS forces me to use a secure screen lock. I want to have Slide method for my ...
5
votes
3answers
22k views

How do I decrypt files on my SD card that I encrypted using the Settings?

I have files that I used to copy from my SD card to my PC using the USB Mass Storage option under the "USB connection" pop-up. I checked the flag under Settings->Location & Security->Data ...
33
votes
4answers
3k views

Is an antivirus really needed for Android?

I use Linux for half a decade now, so I am not used to dealing with viruses anymore. To my surprise, I saw some discussion about antiviruses in Android. I haven't installed any yet, but this bugs me: ...
1
vote
0answers
508 views

Browser webview.db doesn't store hotmail password, but I can still auto log-in hotmail. Why?

On my rooted Galaxy Nexus 4.1.1, stock browser doesn't store any password for hotmail, but whenever I open hotmail, it log-in automatically. I checked data/data/com.android.browser/webview.db, the ...
3
votes
1answer
3k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
9
votes
3answers
4k views

deactivate PIN-request after airplane mode

When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
1
vote
2answers
3k views

Razr Maxx HD, How to wipe data with broken screen

My screen is totally destroyed, it's black and unresponsive. The phone turns on just fine, though. I just got my new phone and I have to send this one back now. I want to wipe the phone before I send ...
0
votes
1answer
84 views

What are ways of contracting malware/viruses on your Android phone?

I'd like to know so I can prevent it from happening.
3
votes
2answers
308 views

Double Security for Gmail

My phone has a pattern lock and I want friends to be able to unlock it with the pattern, however, I do not want them to have access to my gmail. Is there a way that I can force gmail to ask for the ...
1
vote
1answer
67 views

Malware App Installed, Then uninstalled immediately- Next action steps

I recently accidentally installed an app from Google Play onto my android phone (Version 2.3.6) which was clearly a fake... It had the same name and icon as the app I wanted, and I hit the install ...
-1
votes
1answer
177 views

Can a Factory Reset fix Malware Problem? And another question too!

After factory reset my pictures, videos, and other media remained. Is it an indication of infection? Prior to the factory reset. Can you explain why my media wasn't deleted? It was supposed to wipe ...
1
vote
1answer
106 views

How to check emails (safely & securely)? [closed]

I trust Linux more than Android. Likewise, I trust Firefox (with certain settings and certain security-related addons) more than Chrome (or Chromium). I'm new to the smartphone world and couldn't wait ...
14
votes
7answers
5k views

Are the apps safe? How can I make my Android more secure?

Are the apps on the Android Market checked or audited? If I search Google for "hardening Android", the best hit I can find is Google Android Hardening Checklist. What's your opinion regarding this? ...
2
votes
2answers
670 views

Is there a Ghostery equivalent for Firefox on Android?

I use Firefox on a smartphone with limited RAM, where Ghostery would be most useful (removing useless content). Plus I don't like being tracked anyways. So is there an equivalent to Ghostery that ...
0
votes
1answer
18 views

Can a MM download, being sent to one phone, also go to a third party who is concurrently sending the mutual receiver a text message?

I got a MM download that was being sent to someone to whom I was in the process of sending a text message; is this actually possible? We both ended up with the MM download; the mutual receiver of ...
2
votes
2answers
51 views

Protecting or Limiting my account's power

I have linked a great deal of power to my phone. It is connected to my gmail to such an extent that I am starting to get concerned that if somebody where to steal my phone they could reek havok on my ...
2
votes
0answers
178 views

How CF-Autoroot works?

How CF-autoroot Theoretically is able to root android devices ? I'm wondering on what technics it use to run su ? Do it use a custom/patched Linux kernel ? or it is based on local root exploit ? I ...
0
votes
1answer
210 views

How can I easily deny other apps from accessing my personal data?

If I use the standard Android contacts, sms and phone app all these data are endangered to be read by other apps. Is there a solution without rooting the phone that every simple user could easily ...
0
votes
2answers
2k views

How to protect my Google account credentials on my Android phone?

Currently I use Gmail on my desktop with 2-step verification (by SMS) enabled and I consider it secure. Now I'm buying an Android phone and I'd like to check Gmail on it sometimes, but I don't want to ...
3
votes
1answer
542 views

Application-specific passwords only work for a short period of time

I have two-step verification enabled on my Google Account, and I generated an application-specific password for my Android device (Infuse 4G with custom ROM in case that's relevant), and input it. ...
7
votes
3answers
2k views

Any hack to get rid of the “Too many password attempts” lock?

My kids often play with my phone which has a pattern lock screen, and it gets locked due to many attempts, then the phone is locked out and requires a password. I use 2-step verification, so in ...
4
votes
2answers
2k views

Apps install on their own

Every night for the past few days my phone installs a new app that I never saw/wanted/heard of before. It all started with AppCaster (Which I never installed on my phone, it just showed up one ...
1
vote
0answers
25 views

Stolen Phone: How can I purge my data if my Google password was recently changed? [duplicate]

Suppose that the cellphone is stolen and that to avoid the thief to use the email I've changed the google account password. In that case, is there something I can yet do to delete personal stuff like ...
1
vote
1answer
571 views

Is imessageonandroid.com really an iMessages app for Android or is it Scam?

I saw on a website that they have an iMessages app that lets you text iPhone user for free just like it is for an iPhone user texting another iPhone user. Do you use our own number, or do you have ...
12
votes
2answers
3k views

How to protect my Google Account?

I am very concerned with security of my Google account in case I lose the phone (as in: lose it, have it stolen/robbed, etc.). Right now it seems that whoever grabs my phone will also have full access ...
0
votes
1answer
232 views

SGS3 I-9300 Android 4.2 - why can't I disable these system apps?

nb. I can disable them using 3rd party root apps without any discernible negative effects. Are these networking protocols default? They seem to be harmless but everything I read about sit0 seems ...
20
votes
3answers
2k views

Is there a black list for Android apps?

Is there a blacklist yet for Android apps? After reading things like this on slashdot, I think this sort of thing would be extremely helpful. As much as I like Android because I'm not censored as to ...
11
votes
2answers
292 views

How can I require the pattern unlock only for specified times

Is it possible to require the pattern unlock only during certain times? For example, while I'm at work, I don't want to require the pattern unlock, however, anytime I'm not at work I do. Is this ...
2
votes
2answers
2k views

Stuck with draconian security restrictions after adding and removing corporate e-mail account

After adding a corporate e-mail account to my phone, my device asked to encrypt itself as well as the attached SD card, and change the lock to password. I immediately removed the account, but the ...
3
votes
4answers
3k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
5
votes
3answers
717 views

Are there any good firewalls available?

Does the android platform have any firewall application?
0
votes
1answer
33 views

Checking virus/security status of specific app?

So I let my 8 year old cousins play a game on my tablet for a bit and next thing i knew they had downloaded and installed three new games, some of which acted suspiciously, displaying notifications ...
0
votes
0answers
970 views

Accessing phone data when locked out

I am using a BLU Quattro HD 5.7 phone, running ICS, and I have locked myself out due to my own stupidity. It doesn't have a wifi connection or a data connection at the moment because I do not have a ...
7
votes
1answer
170 views

Does the Secure Random bug affect apps besides Bitcoin?

The Bitcoin Project recently announced a bug in the SecureRandom implementation on Android, which caused Bitcoin wallet apps to generate weak private keys that leave bitcoins vulnerable to theft. The ...