For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
1answer
122 views

Is this android mobile device credit card payment system secure and safe?

Mobile device credit card payments and credit card readers are appearing everywhere, but then we all know any payment app's security is nought if the android device is rooted. Before I give my credit ...
1
vote
2answers
511 views

How to disable screen lock during Android development?

I am developing Android app with my daily phone, I want to turn off screen lock only during development. I can done this manually, but that is too troublesome and sometimes I forgot to enable it ...
24
votes
1answer
16k views

How can I verify the authenticity of an apk file I downloaded?

The latest update of Google Maps is unavailable in my country, so I downloaded a version by googling for "Google Maps 5.4.0 apk". I did in fact find it, but now I wonder how I can tell if this is in ...
20
votes
1answer
1k views

Why do some apps with no internet features require internet access?

A couple of apps I've installed or considered say they require internet access even though they have no obvious internet features. One of the most surprising ones was a simple compass app. Why is ...
7
votes
1answer
314 views

Can I recall a command to reset a lost phone?

Last night I lost my Nexus 7 coming back from a friend's house. Since it has a lot of confidential work email on one account I logged into the Android Device Manager and - when it didn't show up - set ...
24
votes
2answers
17k views

How do I get rid of “Network may be monitored” in KitKat?

Ever since I've installed my own CA in the key store I'm getting warnings that the network may be monitored. Well, I guess that's a valid warning if I don't trust these certificates, but I really ...
56
votes
6answers
37k views

My Gmail is signed in through the app on ex-boyfriend's phone

I had my email signed in on the Gmail app on my boyfriend's phone who is now on the other side of the country. I've asked him a couple times to disconnect it but recently checked out Google Play and ...
6
votes
1answer
260 views

Setup Tor server on my Android

How do I setup a Tor server on my Android tablet? I can install the Orbot client, but how do I contribute to the tor network? I have my tablet on a WiFi the most of the day so it would be nice to ...
3
votes
2answers
2k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
1
vote
1answer
135 views

How does Google find devices for Android Device Manager?

I've seen the news story a few weeks ago that Google has finally implemented a feature similar to Apple's Find My iPhone. The weird thing is that Google says that somehow magically all old devices ...
0
votes
2answers
119 views

Would it be possible to sandbox apps with SELinux?

Many apps require too much permissions that they do not need to function Most apps needs internet connection to talk to some API (let's say updates checking or notifications ..etc) and need to access ...
0
votes
1answer
1k views

I forgot my lock pattern, how do I reset it? [duplicate]

Possible Duplicate: Recovering from forgotten lock pattern I have a Toshiba Thrive Android Table and I forgot what I used as my pattern lock. How do I reset it? Someone please help!
5
votes
2answers
2k views

Restricting Web Access to a single domain on Android tablets?

Our sales team came to me earlier with a question about Android OS. I've never used Android, but I do know it is a Linux-based OS. Frankly, I don't have the time to research for myself the ...
5
votes
2answers
2k views

Looking for Location-Specific Screen Locking Behaviour

I'd like to have a feature that allows my Android phone to change its lock mechanism automatically dependent on location. For example, most of the time I use pattern unlock when out and about but ...
17
votes
1answer
1k views

Why can't a keyboard on the Samsung Galaxy S3 collect passwords?

When I enable an input method (a keyboard app) on a Nexus device, I see the following confirmation message: This input method may be able to collect all the text that you type, including personal ...
11
votes
4answers
4k views

Can my Android device become - remotely and without my permission - a wiretap and get used as surveillance device?

I saw the following article: An article in the Financial Times last year said mobile providers can "remotely install a piece of software on to any handset, without the owner's knowledge, which ...
2
votes
1answer
478 views

What is the mobile provisioning website supposed to do?

When I go to Settings → More... → Mobile plan it gives me a message "{mobile operator} has no known provisioning website". Digging into Android source code for WirelessSettings.java I found how URL ...
1
vote
0answers
57 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
2answers
221 views

Why does every application run as a separate user under Android?

If it's for security reasons, so that one application cannot harm another, why is it not like that in the desktop Linux distros? If desktop operating systems do prefer interaction between ...
7
votes
1answer
248 views

How to prepare myself & smartphone/tablet in the event it goes missing or is stolen?

I would like to know what measures or steps etc that should be performed, in order to protect & safeguard whatever "data" is on my Android Smartphone or Tablet, and indeed the device itself, in ...
0
votes
1answer
144 views

Mobile Lost and some one else is using the mobile with a different sim

I need help to track the person who has my mobile. My account(email) is still linked with google play on that mobile. I can install apps from my browser from google play account. Is there any app ...
3
votes
1answer
2k views

Is it possible to prevent the screen turning off when pressing the power button?

I run an app on my handset which really needs the screen to remain on for it to function properly. The app already seems to attempt to keep the screen on as the screen timeout seems to be disabled ...
6
votes
2answers
2k views

Google two-step authentication and Android lock screen

After many failed screen unlock attempts, the user is required to enter the Google account password. That's a good idea. But what if I enabled Google's two-factor authentication, and then entered the ...
0
votes
1answer
35 views

How i can protect my android from Master Key Vulneralability?

When i install apps ,that i take from my friends , it seems quite fishy , so how to check that the apps are trusted or not.
2
votes
2answers
169 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
0
votes
0answers
54 views

What is custom URI handler in android?

I came across the term "Custom URI Handler" which is a bad practice in android security. Can anybody please tell what is custom URI handler? What are the security issues raised by custom URI handlers? ...
1
vote
1answer
76 views

What is master key vulnerability in android?

What is master key vulnerability in Android? From looking at a few different sites, I understand that it is bypassing the authentication provided by signing of apps. How can I detect an app is ...
0
votes
1answer
555 views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
-1
votes
1answer
131 views

wave hand & lock phone automatically

Is there any way to lock my Samsung Quattro (running Android 4.2) just by waving my hand upon it?
4
votes
1answer
2k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
1
vote
0answers
576 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
4
votes
1answer
1k views

Find lost device without Gmail account configured and without SIM card

I recently misplaced a phone that did not have gmail account configured and did not have a SIM card in it either. Is there any way I can track it ? All of the tracking apps either require sending an ...
1
vote
1answer
3k views

Android 4.1 unable to connect to Google Play but other wifi functions work - how to fix?

I'm using a Rikomagic 802III running Android 4.1.1, connected to my TV. Until today, I was able to connect to Google Play, and my widgets were showing data. Now, when I open Google Play, I get an ...
39
votes
10answers
13k views

Is there a way to block access to or wipe my Google data for a lost/stolen phone

If my phone was ever lost or stolen, my only real concern is data and apps associated with my Google account, such as my Gmail, the ability to purchase apps from the Market, and maybe Picasa albums. ...
1
vote
2answers
185 views

How can I control my phone remotely?

As a new Android user, this question has had me thinking quite a while. Is it possible to create an app or is there an app available that will do the following; Remote access to your device ...
0
votes
1answer
614 views

Locating a stolen phone with Android Device Manager

On the weekend I had a brand new phone stolen from me. It was out of battery at the time. I'm assuming whoever stole the phone has removed the SIM card and probably re-flashed it as it was locked. ...
5
votes
1answer
191 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
0
votes
1answer
431 views

Protecting my Google identity in case my Android device gets stolen?

My devices are all linked to my main Google account. This is encouraged, almost required, by Android, for example to make my Google Play apps available everywhere. However, it requires me to store my ...
24
votes
2answers
46k views

How is the Gmail password stored in Android - and where?

I have looked around and found no information on how Android manages to store passwords on the device. Especially Gmail passwords. I'm looking to learn how Android encrypts and stores passwords ? What ...
0
votes
0answers
71 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
18
votes
6answers
33k views

How do I avoid the server-specified security policies for my work e-mail?

When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?: I just received a Nexus 7 and signed ...
0
votes
0answers
369 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
2
votes
1answer
793 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
72 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
0
votes
0answers
1k views

How to auto unlock SIM/UICC on trusted devices?

I don't like manually entering PIN1 of SIM/UICC everytime I reboot my Android smartphone or switch SIM/UICC between multiple trusted devices. How to auto unlock SIM/UICC on my trusted devices? The ...
5
votes
3answers
161 views

Is there a standard place for the Owner Information on an Android phone?

I found an lost Android phone - is there a standard place on Android phones for owner information so I can contact the person who lost it?
2
votes
1answer
85 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
4
votes
2answers
4k views

What causes the error “No certificate found in USB storage.” when trying to import a certificate?

I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
22
votes
4answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...
3
votes
1answer
3k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...