For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

4
votes
2answers
670 views

How to mod android rom so none can ever install an app in it?

I already know how to modify an android ROM by modifying files, remove and add it into ROM. But I don't have knowledge to building/compiling a ROM. I want to lock the OS so none can ever install new ...
4
votes
3answers
515 views

Can I use a pin/password/pattern lock and safely have basic phone functionality while in car?

I would like to lock my phone with a pin for additional security. Also, I try to minimize my phone usage in the car, but in the event that I do need to call someone, I would like to be able to do so ...
4
votes
1answer
173 views

Is there a way to control app execution environment?

Is there some way of controlling how an installed application communicates over the network and writes data to disk? Let's say I have an application that will handle sensitive data, but it comes from ...
4
votes
1answer
74 views

Where do you find the password attempts setting or option in ICS?

I want to either stop this function or at the very least set the number of attempts to a higher number than 3.
4
votes
1answer
151 views

Does Android 2.2 log digits dialed during a call, and if so, how can I clear this log?

Some voice jails that I call require me to enter a password. Are the digits I type while a call is active logged (as call dialing is), and if so, how can I remove them from the log? As you might guess,...
4
votes
0answers
40 views

Do permissions apply across users?

If I create a secondary user and install an app while using the phone as that user, will the permissions for that app carry over for the primary user? For example, let's say I have a primary user, ...
4
votes
1answer
100 views

Joining a public WiFi made the owner able to send me a Facebook friend request. How?

I walked by a bar with free, unsecured WiFi. My device auto-joined it, and a minute later I had a friend request on Facebook from that very bar. How did they get my Facebook identity just from ...
4
votes
0answers
3k views

What is Google Partner Setup?

What does the Google Partner Setup app that is pre-installed on almost every Android device actually do? Why does it need each of those intrusive permissions, especially the Phone permission? Why ...
4
votes
2answers
183 views

Protect ADB access via network?

I have several Android devices in a local network. (Android Set Top Boxes from Geniatech, running 4.2 Jelly-Bean) If these boxes have problems or need debugging, I simply connect to them via adb ...
4
votes
0answers
348 views

Best lost / stolen device tracking app [duplicate]

Possible Duplicate: Helping a lost phone get found What is the best tracking app for a stolen or lost device? I've tried iTag but I'm thinking about switching to Prey http://preyproject.com/...
3
votes
8answers
17k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
3
votes
4answers
12k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
3
votes
2answers
6k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
3
votes
2answers
125 views

Does using various app stores in parallel cause any issues?

I am using a Android phone with Lollipop and found that apps can be installed from various app stores like Google Play, Amazon App Store or F-Droid. Are there any problems I can run into if apps are ...
3
votes
4answers
1k views

How can I save and protect sexy pictures sent by my girlfriend?

I'm traveling and my GF wants to send me some racy pictures. Of course I will accept that offer, but I need to save them on my phone in a safe way. My phone uses Activesync, so it's possible for my ...
3
votes
2answers
5k views

Can applications be downloaded without a Google Account and without disabling security features?

If I wish to install applications such as Skype, DropBox, etc however without registering for a Google account, is that possible? If so, how do I install them without a Google account?
3
votes
2answers
126 views

How to prevent two-factor code being exposed on lock screen in messages notification?

On Lollipop, the text message notification on the lock screen includes some of the content of the text message. For two-factor code text messages, this will display the two factor code to anyone ...
3
votes
2answers
5k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
3
votes
1answer
9k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
3
votes
1answer
158 views

Can Java be exploited through Android app ads?

It turns out that Java has a security flaw that is currently being exploited to put malware on people's computers. Is there any risk that advertisements in Android apps will have embedded, malicious ...
3
votes
2answers
592 views

Android applications privacy and security concerns

If a user wants to install some applications from play store, is it sole responsibility of the user to decide whether the apps may harm or not? Should the user be worries regarding permissions? For ...
3
votes
1answer
719 views

How to prevent data extraction from rooted phone via adb?

I've a question regarding security in a rooted device. Being superuser means that you can access the /data/data directory, and that's a lot of personal data (I think it is almost all the data there ...
3
votes
2answers
331 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
3
votes
4answers
5k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
3
votes
2answers
421 views

Is Android susceptible to OpenSSL vulnerabilities? [duplicate]

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC ...
3
votes
1answer
4k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...
3
votes
3answers
3k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? Also,...
3
votes
1answer
58 views

Protect from theft at flash level

There are a lot of apps that could block your phone in case of theft, take picture of thief remotely and such, but in case of reset any of this security methods will be useless So I was wondering if ...
3
votes
2answers
2k views

Is it possible to use “unlock with fingerprint” feature, and be asked for (after boot) giving passphrase and fingerprint on encrypted Galaxy S6

I would like to purchase a Samsung Galaxy S6. One of the main reasons for the choice of device is the (apparently) good fingerprint sensor. I would like to / have to encrypt my phone (my employer ...
3
votes
1answer
2k views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...
3
votes
3answers
7k views

How do I disable GMail?

Yes, this has been asked before, but neither really addresses my concern, and I don't have reputation enough to add comments to existing questions. I've bought the cheapest Android 4 tablet with ...
3
votes
1answer
2k views

Mounting and Unmounting of Memory Card just by touch?

I am using a Samsung Galaxy Y mobile phone. In my mobile's settings, I see an option to "Unmount the Memory Card for Safe Removal", so it is possible to unmount the memory card without actually ...
3
votes
1answer
893 views

is it possible to use a CA-Cert for serverauthentification in WPA enterprise networks with android 2.2+?

I just wanted to know if it is possible with android 2.2+ to use a ca-cert for server auth in WPA-Enterprise networks? A fried told me it is not possible, but this would mean there would be a mayor ...
3
votes
1answer
271 views

Require fingerprint to answer call?

A friend has a problem with other people answering their phone and thereby intercepting their calls. Is anybody aware of an app, setting, or Android distro that requires a fingerprint swipe to answer ...
3
votes
1answer
259 views

How to override default Android's default screen lock security policy?

I want my Android device screen to open without requiring password. So I chose "none" option in Security settings. But, when I needed to add a VPN connection, it required me to provide a password, PIN,...
3
votes
1answer
214 views

Protecting phone from the FREAK bug

How can I protect my phone from the FREAK bug? Phone is a Samsung GT-S5830 running Gingerbread.
3
votes
1answer
1k views

What is the attack vector of <= 4.3 web view vulnerability?

This is in reference to the vulnerability that Google is not patching, since the WebView in 4.3 and less is part of the OS and not a separate updateable component. Since some people will not have ...
3
votes
1answer
788 views

Which Android version/phone can control per-app access permission?

The only reason I am still using an iPhone is due to the fact that most Android phones did not allow control of per-app access permission. The App Ops feature was once there but pulled. I know some ...
3
votes
1answer
239 views

How to securely/permanently delete sensitive information on a Galaxy S5?

My S5's screen died about a week ago and as a result the phone will be getting swapped. It has some pretty sensitive information on it (such as numbers, credit card info, photos, etc.) that I want to ...
3
votes
1answer
122 views

Are calls made by third-party apps logged?

For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener (...
3
votes
1answer
525 views

Disable password hiding globally

With a touch screen keyboard, having passwords I am entering displayed hidden is more trouble than it's worth to me. Few applications like KeePassDroid allow you to disable this feature. Is there any ...
3
votes
2answers
3k views

How can I undo the “Do Not Ask Again” for bluetooth contacts?

When I first connected my phone (Samsung Galaxy S II) to a bluetooth device, I was prompted that the device wanted to access my contacts. I mistakenly clicked Do Not Ask Again but I want to undo that....
3
votes
2answers
698 views

Strange/troubling behavior when putting phone in car dock

I have a Galaxy Nexus (rooted, running stock Jellybean). When I place it in the car dock, my screen gets flooded with notifications for "shell granted superuser access," and after a few minutes ...
3
votes
1answer
604 views

Application-specific passwords only work for a short period of time

I have two-step verification enabled on my Google Account, and I generated an application-specific password for my Android device (Infuse 4G with custom ROM in case that's relevant), and input it. ...
3
votes
1answer
831 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
3
votes
1answer
63 views

Are there any issues with having multiple phone finding applications?

I like to use Prey and have no complaints about it so far. However, our carrier also offers Mobile Recovery, which does a lot of the same things (GPS locations, etc). Is there any harm in having ...
3
votes
2answers
158 views

How can I see in the App store whether I am working secure

I wanted to buy some small application from the app store, it asked for my credit card information, but I was unsure whether we were working in secure mode. How can you see, during payment, whether ...
3
votes
1answer
731 views

Is there anyway to connect to a WPA Enterprise Wi-Fi network with version 1.5 on a Motorola Backflip?

The only available security options when adding an new Wi-Fi network are: None WEP WPA Personal WPA2 Personal I was hoping to connect to WPA Enterprise either by getting it added to the list, or ...
3
votes
1answer
271 views

Android application firewall - interactive prompt confirmation for connections

I'm thinking of developing application, or probably extending AFWall+ app What I'm missing on Android is possibility to confirm each connection from each application, simply blocking the application ...
3
votes
2answers
858 views

Double Security for Gmail

My phone has a pattern lock and I want friends to be able to unlock it with the pattern, however, I do not want them to have access to my gmail. Is there a way that I can force gmail to ask for the ...