For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

4
votes
1answer
3k views

Can I lock the Nexus 4/7 bootloader after flashing a non-stock ROM?

I know that doing a fastboot oem unlock will both unlock the bootloader and wipe the data on the device. Unfortunately, while this allows me to install a non-stock ROM like Cyanogenmod, my ...
4
votes
2answers
3k views

What causes the error “No certificate found in USB storage.” when trying to import a certificate?

I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
4
votes
3answers
8k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
4
votes
2answers
516 views

How to mod android rom so none can ever install an app in it?

I already know how to modify an android ROM by modifying files, remove and add it into ROM. But I don't have knowledge to building/compiling a ROM. I want to lock the OS so none can ever install new ...
4
votes
3answers
421 views

Can I use a pin/password/pattern lock and safely have basic phone functionality while in car?

I would like to lock my phone with a pin for additional security. Also, I try to minimize my phone usage in the car, but in the event that I do need to call someone, I would like to be able to do so ...
4
votes
1answer
154 views

Is there a way to control app execution environment?

Is there some way of controlling how an installed application communicates over the network and writes data to disk? Let's say I have an application that will handle sensitive data, but it comes from ...
4
votes
2answers
630 views

Stop droid x from security locking during a call

I have noticed that when I am on a lengthy call on my Droid X, the phone locks itself. This seems to happen within the expected timeout period, so I don't believe that the phone is malfunctioning. ...
4
votes
2answers
500 views

Set a profile in Tasker to wipe the phone

Is it possible to create a profile in Tasker that completely wipes the phone? I ask because I haven't tried Tasker yet, and this might be enough to make me buy it. It doesn't matter how this profile ...
4
votes
1answer
59 views

Where do you find the password attempts setting or option in ICS?

I want to either stop this function or at the very least set the number of attempts to a higher number than 3.
4
votes
1answer
137 views

Does Android 2.2 log digits dialed during a call, and if so, how can I clear this log?

Some voice jails that I call require me to enter a password. Are the digits I type while a call is active logged (as call dialing is), and if so, how can I remove them from the log? As you might ...
4
votes
1answer
583 views

Data Vault apps with Unlock Pattern

I'm currently using the Wallet app to keep my bank acct#s, CC#s etc. safely on my phone. However, entering the password when I need to unlock the codes is kind of an annoyance. Specially when you ...
4
votes
0answers
340 views

Best lost / stolen device tracking app [duplicate]

Possible Duplicate: Helping a lost phone get found What is the best tracking app for a stolen or lost device? I've tried iTag but I'm thinking about switching to Prey ...
3
votes
2answers
2k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
3
votes
2answers
297 views

Questions About Android Privacy

The permissions warning in the Android Market is very vague. As well, I can't see the app permissions in a collective area of all the apps I have previously installed. So, I have no clue whether an ...
3
votes
1answer
692 views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
3
votes
2answers
705 views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
3
votes
2answers
6k views

Is there a way to block permissions for other applications on Jelly Bean?

I use LBE Privacy Guard with great pleasure to grant and withdraw permissions to access my contacts, the internet, etc. for each individual application installed in Ice-Cream Sandwich on my Galaxy ...
3
votes
2answers
3k views

Can applications be downloaded without a Google Account and without disabling security features?

If I wish to install applications such as Skype, DropBox, etc however without registering for a Google account, is that possible? If so, how do I install them without a Google account?
3
votes
2answers
1k views

What is this Google Settings app that installed itself on my phone?

Today, all of a sudden I saw this app in my Samsung Galaxy Y mobile phone: I am talking about the app named "Google Settings" I uninstalled it immediately only to find it installed again a few ...
3
votes
2answers
470 views

Android applications privacy and security concerns

If a user wants to install some applications from play store, is it sole responsibility of the user to decide whether the apps may harm or not? Should the user be worries regarding permissions? For ...
3
votes
2answers
137 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
3
votes
4answers
3k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
3
votes
2answers
157 views

Is Android susceptible to OpenSSL vulnerabilities? [duplicate]

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC ...
3
votes
1answer
137 views

Can Java be exploited through Android app ads?

It turns out that Java has a security flaw that is currently being exploited to put malware on people's computers. Is there any risk that advertisements in Android apps will have embedded, malicious ...
3
votes
3answers
1k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? ...
3
votes
1answer
360 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
3
votes
1answer
311 views

Dev/Log's - login attempts and how to read the log?

My first post on here and hopefully a easy fun answer. I'm looking for the location for failed login attempts on the device - I've looked on the device and it seems the logs are located in ...
3
votes
1answer
127 views

What are potential problems/violations that malware apps can do?

There are some apps that I am considering to download which have many permission requirements and have few comments from other past users. The number of downloads are relatively low so I am ...
3
votes
1answer
236 views

Can an Android device be locked down by an administrator?

I would like to know if it is possible to use android devices in a work environment with restrictions on the phones usage. These phones would be given to members in the field to log data, and only ...
3
votes
1answer
863 views

is it possible to use a CA-Cert for serverauthentification in WPA enterprise networks with android 2.2+?

I just wanted to know if it is possible with android 2.2+ to use a ca-cert for server auth in WPA-Enterprise networks? A fried told me it is not possible, but this would mean there would be a mayor ...
3
votes
3answers
2k views

How do I disable GMail?

Yes, this has been asked before, but neither really addresses my concern, and I don't have reputation enough to add comments to existing questions. I've bought the cheapest Android 4 tablet with ...
3
votes
1answer
92 views

Are calls made by third-party apps logged?

For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener ...
3
votes
1answer
307 views

Disable password hiding globally

With a touch screen keyboard, having passwords I am entering displayed hidden is more trouble than it's worth to me. Few applications like KeePassDroid allow you to disable this feature. Is there any ...
3
votes
1answer
509 views

Application-specific passwords only work for a short period of time

I have two-step verification enabled on my Google Account, and I generated an application-specific password for my Android device (Infuse 4G with custom ROM in case that's relevant), and input it. ...
3
votes
1answer
759 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
3
votes
2answers
142 views

How can I see in the App store whether I am working secure

I wanted to buy some small application from the app store, it asked for my credit card information, but I was unsure whether we were working in secure mode. How can you see, during payment, whether ...
3
votes
1answer
686 views

Is there anyway to connect to a WPA Enterprise Wi-Fi network with version 1.5 on a Motorola Backflip?

The only available security options when adding an new Wi-Fi network are: None WEP WPA Personal WPA2 Personal I was hoping to connect to WPA Enterprise either by getting it added to the list, or ...
3
votes
5answers
3k views

Remote factory reset and changing Google password

In case I ever lose my Nexus 4 phone, I've opened to the Google Settings app, then tapped "Android Device Manager" and from there, I've enabled both "Remotely locate this device" and "Allow remote ...
3
votes
1answer
982 views

Is it possible to prevent the screen turning off when pressing the power button?

I run an app on my handset which really needs the screen to remain on for it to function properly. The app already seems to attempt to keep the screen on as the screen timeout seems to be disabled ...
3
votes
2answers
203 views

Double Security for Gmail

My phone has a pattern lock and I want friends to be able to unlock it with the pattern, however, I do not want them to have access to my gmail. Is there a way that I can force gmail to ask for the ...
3
votes
1answer
131 views

Google Authenticator used by native apps?

I recently turned on two-step verification for my Google account and installed the Google Authenticator app on my Android device. Based on what I have read everywhere (even Google's official info: ...
3
votes
2answers
827 views

How can I undo the “Do Not Ask Again” for bluetooth contacts?

When I first connected my phone (Samsung Galaxy S II) to a bluetooth device, I was prompted that the device wanted to access my contacts. I mistakenly clicked Do Not Ask Again but I want to undo ...
3
votes
2answers
668 views

Strange/troubling behavior when putting phone in car dock

I have a Galaxy Nexus (rooted, running stock Jellybean). When I place it in the car dock, my screen gets flooded with notifications for "shell granted superuser access," and after a few minutes ...
3
votes
1answer
3k views

Galaxy Note 2: Disable MTP/PTP

When I connect my HTC Sensation (firmware: CM 10) to some PC I need to enter a passcode (to unlock the phone) and explicitly allow mounting as usb drive. But when I connect SGN2 it enables MTP or PTP ...
3
votes
0answers
328 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
3
votes
0answers
152 views

A data forensic tools for android [closed]

I have recently taken interest in digital forensics. What is the best tool, or set of tools to obtain and analyze images of android phones?
3
votes
4answers
3k views

How can I restrict a user's ability to modify settings or install apps?

Our team is planning to buy around 10 Android phones for the team members. We don't want them to install any applications other than the ones provided. Is there a method or an application which would ...
2
votes
3answers
559 views

Is Evernote a malicious app?

I have been using Evernote on my Laptop and Mobile phone for quite some time now. Recently, when downloading an update of Evernote app in my phone from Google Play app, I noticed that Evernote asks ...
2
votes
3answers
1k views

Why does the Android device connect to a secured wireless router without providing a password?

During the weekend, I was able to connect to a secured wireless network via an Android device (Asus Transformer Tablet), but when I tried to connect to the wireless network via my laptop it was ...
2
votes
2answers
111 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...