For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

4
votes
3answers
8k views

How can I disable or password protect my device's 'factory reset' function?

Is there any way to prevent a factory reset, like password protection? I would basically like to protect my phone from resetting if it gets stolen.
4
votes
1answer
5k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...
4
votes
1answer
1k views

I want to password lock my “Applications” settings, but no other settings

I have an AppLock program that locks certain apps with a PIN. In order for the app to have any effectiveness, I include Settings as an App to lock. Otherwise, I could go to Settings -> ...
4
votes
2answers
2k views

Apps install on their own

Every night for the past few days my phone installs a new app that I never saw/wanted/heard of before. It all started with AppCaster (Which I never installed on my phone, it just showed up one ...
4
votes
2answers
111 views

Why my phone does not need to update the password?

I changed my gmail password a day ago, but my phone does not require me to put in the new one. I can still access my gmail with the old password. Why? Phone is rooted, sim unlocked , running android ...
4
votes
1answer
147 views

different way of securing applications

In my phone instead of unlocking screen by providing "symbol", I'd like the phone to unlock to most of my applications without the "symbol". But for selected important applications (eg. gmail) I'd ...
4
votes
2answers
4k views

What causes the error “No certificate found in USB storage.” when trying to import a certificate?

I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
4
votes
3answers
12k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
4
votes
5answers
628 views

Erasing SD Card contents and personal data

I have an SD card in my Droid Global or Droid X, not exactly sure which model. I go to the files and click on the SD card instead of shred files and delete all of its contents. I then go to Privacy ...
4
votes
1answer
255 views

Can an Android device be locked down by an administrator?

I would like to know if it is possible to use android devices in a work environment with restrictions on the phones usage. These phones would be given to members in the field to log data, and only ...
4
votes
2answers
568 views

How to mod android rom so none can ever install an app in it?

I already know how to modify an android ROM by modifying files, remove and add it into ROM. But I don't have knowledge to building/compiling a ROM. I want to lock the OS so none can ever install new ...
4
votes
3answers
458 views

Can I use a pin/password/pattern lock and safely have basic phone functionality while in car?

I would like to lock my phone with a pin for additional security. Also, I try to minimize my phone usage in the car, but in the event that I do need to call someone, I would like to be able to do so ...
4
votes
1answer
161 views

Is there a way to control app execution environment?

Is there some way of controlling how an installed application communicates over the network and writes data to disk? Let's say I have an application that will handle sensitive data, but it comes from ...
4
votes
2answers
670 views

Stop droid x from security locking during a call

I have noticed that when I am on a lengthy call on my Droid X, the phone locks itself. This seems to happen within the expected timeout period, so I don't believe that the phone is malfunctioning. ...
4
votes
1answer
61 views

Where do you find the password attempts setting or option in ICS?

I want to either stop this function or at the very least set the number of attempts to a higher number than 3.
4
votes
1answer
146 views

Does Android 2.2 log digits dialed during a call, and if so, how can I clear this log?

Some voice jails that I call require me to enter a password. Are the digits I type while a call is active logged (as call dialing is), and if so, how can I remove them from the log? As you might ...
4
votes
1answer
720 views

Data Vault apps with Unlock Pattern

I'm currently using the Wallet app to keep my bank acct#s, CC#s etc. safely on my phone. However, entering the password when I need to unlock the codes is kind of an annoyance. Specially when you ...
4
votes
0answers
342 views

Best lost / stolen device tracking app [duplicate]

Possible Duplicate: Helping a lost phone get found What is the best tracking app for a stolen or lost device? I've tried iTag but I'm thinking about switching to Prey ...
3
votes
2answers
3k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
3
votes
2answers
311 views

Questions About Android Privacy

The permissions warning in the Android Market is very vague. As well, I can't see the app permissions in a collective area of all the apps I have previously installed. So, I have no clue whether an ...
3
votes
2answers
4k views

Can applications be downloaded without a Google Account and without disabling security features?

If I wish to install applications such as Skype, DropBox, etc however without registering for a Google account, is that possible? If so, how do I install them without a Google account?
3
votes
4answers
741 views

How can I save and protect sexy pictures sent by my girlfriend?

I'm traveling and my GF wants to send me some racy pictures. Of course I will accept that offer, but I need to save them on my phone in a safe way. My phone uses Activesync, so it's possible for my ...
3
votes
1answer
2k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
3
votes
2answers
2k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
3
votes
2answers
7k views

Is there a way to block permissions for other applications on Jelly Bean?

I use LBE Privacy Guard with great pleasure to grant and withdraw permissions to access my contacts, the internet, etc. for each individual application installed in Ice-Cream Sandwich on my Galaxy ...
3
votes
2answers
514 views

Android applications privacy and security concerns

If a user wants to install some applications from play store, is it sole responsibility of the user to decide whether the apps may harm or not? Should the user be worries regarding permissions? For ...
3
votes
2answers
157 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
3
votes
4answers
3k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
3
votes
2answers
297 views

Is Android susceptible to OpenSSL vulnerabilities? [duplicate]

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC ...
3
votes
1answer
4k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
3
votes
1answer
143 views

Can Java be exploited through Android app ads?

It turns out that Java has a security flaw that is currently being exploited to put malware on people's computers. Is there any risk that advertisements in Android apps will have embedded, malicious ...
3
votes
3answers
1k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? ...
3
votes
1answer
2k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...
3
votes
1answer
521 views

Dev/Log's - login attempts and how to read the log?

My first post on here and hopefully a easy fun answer. I'm looking for the location for failed login attempts on the device - I've looked on the device and it seems the logs are located in ...
3
votes
1answer
140 views

What are potential problems/violations that malware apps can do?

There are some apps that I am considering to download which have many permission requirements and have few comments from other past users. The number of downloads are relatively low so I am ...
3
votes
1answer
873 views

is it possible to use a CA-Cert for serverauthentification in WPA enterprise networks with android 2.2+?

I just wanted to know if it is possible with android 2.2+ to use a ca-cert for server auth in WPA-Enterprise networks? A fried told me it is not possible, but this would mean there would be a mayor ...
3
votes
3answers
3k views

How do I disable GMail?

Yes, this has been asked before, but neither really addresses my concern, and I don't have reputation enough to add comments to existing questions. I've bought the cheapest Android 4 tablet with ...
3
votes
1answer
101 views

Are calls made by third-party apps logged?

For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener ...
3
votes
1answer
397 views

Disable password hiding globally

With a touch screen keyboard, having passwords I am entering displayed hidden is more trouble than it's worth to me. Few applications like KeePassDroid allow you to disable this feature. Is there any ...
3
votes
1answer
557 views

Application-specific passwords only work for a short period of time

I have two-step verification enabled on my Google Account, and I generated an application-specific password for my Android device (Infuse 4G with custom ROM in case that's relevant), and input it. ...
3
votes
1answer
781 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
3
votes
2answers
150 views

How can I see in the App store whether I am working secure

I wanted to buy some small application from the app store, it asked for my credit card information, but I was unsure whether we were working in secure mode. How can you see, during payment, whether ...
3
votes
1answer
703 views

Is there anyway to connect to a WPA Enterprise Wi-Fi network with version 1.5 on a Motorola Backflip?

The only available security options when adding an new Wi-Fi network are: None WEP WPA Personal WPA2 Personal I was hoping to connect to WPA Enterprise either by getting it added to the list, or ...
3
votes
5answers
4k views

Remote factory reset and changing Google password

In case I ever lose my Nexus 4 phone, I've opened to the Google Settings app, then tapped "Android Device Manager" and from there, I've enabled both "Remotely locate this device" and "Allow remote ...
3
votes
1answer
2k views

Is it possible to prevent the screen turning off when pressing the power button?

I run an app on my handset which really needs the screen to remain on for it to function properly. The app already seems to attempt to keep the screen on as the screen timeout seems to be disabled ...
3
votes
2answers
364 views

Double Security for Gmail

My phone has a pattern lock and I want friends to be able to unlock it with the pattern, however, I do not want them to have access to my gmail. Is there a way that I can force gmail to ask for the ...
3
votes
1answer
168 views

Google Authenticator used by native apps?

I recently turned on two-step verification for my Google account and installed the Google Authenticator app on my Android device. Based on what I have read everywhere (even Google's official info: ...
3
votes
2answers
1k views

How can I undo the “Do Not Ask Again” for bluetooth contacts?

When I first connected my phone (Samsung Galaxy S II) to a bluetooth device, I was prompted that the device wanted to access my contacts. I mistakenly clicked Do Not Ask Again but I want to undo ...
3
votes
2answers
684 views

Strange/troubling behavior when putting phone in car dock

I have a Galaxy Nexus (rooted, running stock Jellybean). When I place it in the car dock, my screen gets flooded with notifications for "shell granted superuser access," and after a few minutes ...
3
votes
0answers
69 views

Does Android's implementation of SELinux's M.A.C. inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4 SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...