For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

47
votes
14answers
12k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
0
votes
2answers
181 views

Does Android locally encrypt your fingerprint?

I got myself a Nexus 6P with a fancy fingerprint scanner. So far I'm a bit reluctant to use it because I can't find any info on how Android Marshmallow stores those fingerprints. Are they hashed (as ...
10
votes
3answers
15k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
20
votes
5answers
9k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
0
votes
1answer
50 views

Firefox for Android mysterious connections after turning everything off in settings

I created a user.js that incorporates support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections and other tweaks, yet Firefox for Android still attempts to connect to several ...
0
votes
0answers
39 views

Why sometimes my device doesn't try to recognize trusted face?

I set up trusted face in the smart lock security section of my Nexus 6. When I press power button in attempt to unlock my device usually I see a face/person symbol on the bottom of the screen, as a ...
2
votes
1answer
473 views

When you lock down a Lollipop device to disable Chrome's incognito mode, this creates an XML “restrictions file”. What actual XML is inside the file?

Note: If this post is too long to read, please see the summary in the last paragraph. I own an aging Samsung Galaxy S Relay cellphone. It's running Android 4.1.2 and has a built-in physical keyboard. ...
0
votes
1answer
75 views

Do devices with a fingerprint scanner prevent access to the bootloader/recovery

Pretty simple question but as I have never owned a device with a fingerprint scanner... basically I was wondering: If you secure your device with your fingerprint - is it possible to access the ...
0
votes
0answers
69 views

How to add private key to keychain in Android?

I do not want to type my passwords all the time, but instead, just the password to my private keys. I am using Samsung Galaxy 4 and Android 5.0.1. How can you add private key to your Android ...
0
votes
0answers
11 views

Two factor authenticator app which works when we lost our phone but able to use back same phone number

Currently, I'm using Google Authenticator in my phone. If I lost my phone, but able to get a new phone device, and use back my previous old phone number, will Google Authenticator continue to work? ...
0
votes
1answer
134 views

Calculator WiFi usage on Marshmallow, Nexus 5? What?

I have not used the calculator app. I also don't know why it would be using the wifi or any kind of external data. Yet behold, below: I flashed 6.0 recently and restored some apps from an old ...
19
votes
7answers
13k views

How to know if a side-loaded app is safe?

How can we be assured that the APK of an app that we are downloading from a website is safe to install on our Android phone? Is there a way to know that the downloaded file is safe? Is there an app ...
0
votes
0answers
25 views

Full encryption of a singe purpose device (e.g barcode scanner )

How could we run a single purpose device with high sensitive date on Android 4.4 or later, with full disk encryption and have it unencrypted and unlocked only after entering the device password only ...
1
vote
1answer
141 views

Is Snowden snowing us with his “Smurfs Suite” interview?

I hope this is not too off-topic. This morning when I read news it was full of articles quoting Snowden in his most recent interviews. Apparently the UK's GCHQ and the USA's NSA can (1) turn your ...
31
votes
3answers
59k views

Bypass “Swipe up to unlock” on Android Lollipop lock screen

I recently flashed my Nexus 4 to Android Lollipop using the factory image. I have set a pattern lock for unlocking the device. But whenever I turn on the phone, I have to click on the little lock ...
2
votes
1answer
27k views

What is YGPS and why does it have every permission that's in the book?

I have a FairPhone One. From time to time I look in the system settings and the battery usage to see what is draining the battery. I've disabled anything I don't use, including a number of builtins ...
0
votes
0answers
95 views

How to log all user interaction on my device?

I would like to know whether on an Android device it is possible to: Log the date and time of every time a password is entered on my Android phone (this security measure would mean that if someone ...
0
votes
0answers
16 views

How can I audit access to Android Accounts?

I want to audit the calls made to the Authentication Providers by connected applications. The reason is that I am investigating a rogue application that seems to collect more data and permissions ...
4
votes
3answers
190 views

How do I see if my Android Nexus received the latest security updates?

I'd like to check the patch level of my Nexus. I'm using Lollipop 5.1.1 build LMY48I. Under 'System updates' in 'About phone', it says 'Your system is up to date'. Should I assume that includes ...
1
vote
1answer
3k views

How to see the device list of a given Google account

I have many test Android devices and added my Google account to those device to reuse my application collection. Recently I often recieve payment notification via gmail for application which I really ...
0
votes
0answers
111 views

Why does AVG consider android keychain harmful?

I just got this Lenovo tab 2 A8. When I ran my first AVG scan, it pinpointed Keychain as a threat. What is Keychain? Is it necessary? If not, how do I get rid of it?
0
votes
0answers
48 views

Use and interpretation of AIMSICD

I just downloaded AIMSICD and I understand pretty much what it does but what am I looking for when reading its statistics, results and maps?
2
votes
2answers
208 views

How do I prevent unauthorized accession of my data when my phone is connected to the internet ?

I have an Android smartphone and my data connection is always enabled. I often use browsers like Opera Mini and UC Web as they are faster than the inbuilt browser apps. I often use Mobile banking ...
1
vote
0answers
54 views

Is there a way to use a phone as a virtual keychain for NFC tags?

So let's say I have a bunch of things that can be unlocked via NFC. Each thing would correspond with one tag and one tag only. The problem would then be that I'd have to carry a bunch of tags around. ...
0
votes
2answers
114 views

Accidentally i have uninstalled my home launcher

there is no launcher in my phone.i also switched off and switched on . it showed only samsung nothing else.My device was already rooted and i thought by factory data reset it would work but now i ...
2
votes
1answer
108 views

Pop up about security problems

I had a lot of these pop ups and I don't know if it's for real or not.
23
votes
2answers
4k views

What Android sync'd data is encrypted?

With the release of the firesheep plug-in for firefox it has become trivial for website browsing on open Wi-Fi networks to be hijacked by 3rd party listeners. Android offers the convenient auto-sync ...
28
votes
1answer
23k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
0
votes
0answers
48 views

How to enable password entry for encrypted lollipop but disable built in screen locker at the same time?

I want this because I want to use a strong password to protect my device at boot time, but protect the screen with one time passwords when it is already turned on.
6
votes
3answers
181 views

security implications of participating in app beta testing? [closed]

I am an IT professional (but not in app development). Two days ago someone contacted me about a blog post I made and invited me to participate in beta testing for a messaging app which was related to ...
8
votes
2answers
445 views

Android and antiviruses

This is actually three questions: Are anti-viruses needed for smartphones running Android OS? Is the Android Market absolutely safe (because all precautions are taken by Google to prevent any ...
8
votes
5answers
758 views

How to improve the security on my Android phone?

When I use Android in business I have some secret data on my phone. So if I lose my phone this can easily be stolen. Is there any way I can secure my phone? E.g. adding password for unlocking it. Any ...
1
vote
0answers
122 views

Where does the “privacy protection password” come from?

I wanted to insert a second sim card in my Umi phone. From then onwards, it always asks me for this 'privacy protection password'. I can only insert numbers, not letters... so I'm very puzzled about ...
0
votes
0answers
53 views

How can I check in my Android has been compromised?

I noticed this morning that there was an email in my drafts folder. Inside, was some semi-gibberish text (a couple partial words crammed together). It was definitely not something I typed. I ...
0
votes
1answer
4k views

Used device manager once, now I can't set security to 'none'

Phone is an LG Nexus. I was messing around with security settings and decided to try using a pattern to unlock my phone. No more than 5 minutes later, I completely forget the pattern I set. Did some ...
3
votes
2answers
107 views

If I can access bubble of Messenger like apps from home screen then does it not mean any other app can also access that app? Is Android safe then?

In Android phones, we can access Messenger and many more apps similar to it from home screen ( like bubble-heads, lyrics etc). With this we let one app in your phone access another app, (we can use ...
0
votes
2answers
41 views

How safe are downloadable lock apps?

I've noticed quite a few lock screen apps and some of them do seem to be rather interesting. But, are they really that secure? I've seen some where I can bypass them by using the Recently Opened Apps ...
0
votes
0answers
50 views

Is there any way to backup or transfer AppOps settings?

For those of us who use AppOps, we have hundreds, if not thousands, of settings stored in that app. When transferring to a new device, is there a way to transfer those AppOps settings from one device ...
0
votes
1answer
52 views

What are the security implications of enabling NFC on my Andriod device?

My first NFC-capable Android device (running Lollipop) is on its way. I've been doing some research, and got some info on how NFC events are handled internally, but I'd like some more practical ...
1
vote
0answers
57 views

Combining Ghostery and HTTPS-Everywhere on Android?

On my PC (Windows 8.1) I am happily using Firefox with the Addons Ghostery and HTTPS-Everywhere. I really like this combination so I winder how I can achieve the same things on my Android phone. I ...
8
votes
4answers
6k views

How to delete a specific file in Android so that it can't be recovered?

From my experience a file deleted from a computer filesystem can often be recovered unless it is overwritten with a special program (that's usually called "shredding"). Is an Android-based HTC ...
1
vote
0answers
75 views

New Android Hack/Compromise?

In the past three weeks, I've received calls from numbers I don't recognize and haven't answered them, but these calls leave voicemails over a few minutes. I've listened to a few of the voicemails ...
0
votes
0answers
128 views

How to block some URL`s in Android Louncher App without root?

There is a list of sites, but the user should not be able to go in the running, installed application (Launcher). How to implement this feature on phones without root rights ? For example, I ...
3
votes
8answers
16k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
7
votes
3answers
1k views

How can I securely store my private key I use for logging into my home PC

I've been told that the SD card is a terrible place to store secure data because any app can read it. How else can my phone store my private key I use to log into my home PC ssh server?
4
votes
2answers
159 views

Protect ADB access via network?

I have several Android devices in a local network. (Android Set Top Boxes from Geniatech, running 4.2 Jelly-Bean) If these boxes have problems or need debugging, I simply connect to them via adb ...
1
vote
2answers
251 views

How do certain apps record everything we type in android?

Certain apps like Type Machine claim to be able to record everything you type. You have to install it and activate it from the device's accessibility settings, then it can somehow record typed text. ...
0
votes
0answers
482 views

A message said someone from Ukraine accessed my phone. What to do? How to see this message again?

While I was using my Samsung Galaxy S3 (Android 4.3), a message suddenly popped up saying that someone accessed (or tried to access; I don't exactly remember) your phone from Kiev, Ukraine (I'm in the ...
0
votes
1answer
34 views

Does smart lock check all active verification methods or only one of them?

I've recently started using smart lock. I've enabled two features: a trusted place and a trusted face. I cannot understand if in this case both of these mechanisms should pass to unlock the device or ...
0
votes
1answer
43 views

What device is listed only as Android on list of devices that accessed my account?

I have an LG Optimus Zone 2. On the list of devices that have accessed my account one shows up as Android, but no other information is given. What type of device is this? Why aren't there any details ...