For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

18
votes
2answers
7k views

Stolen phone: is changing your GMail password enough?

My Galaxy phone got stolen today. Of course I blocked my SIM card and changed my password for GMail (and went to the police) but is this enough? Could the person that stole my phone still log in to ...
6
votes
3answers
48k views

Logout from Gmail on my device

It bothers me that my Android Phone is permanently logged into my Gmail account. I want to logout from the device and somehow make the phone ask for username/password when connecting to my account. ...
4
votes
3answers
9k views

How can I disable or password protect my device's 'factory reset' function?

Is there any way to prevent a factory reset, like password protection? I would basically like to protect my phone from resetting if it gets stolen.
12
votes
2answers
4k views

How can I make my phone/tablet ring remotely without a SIM card?

I appear to have lost my Streak somewhere in my apartment, and I can't call it since I don't have a SIM card in it. I've remotely installed Plan B just because, but unfortunately the GPS coordinates ...
38
votes
4answers
12k views

Just how secure is a pattern lock?

I recently had a phone stolen. It's been replaced, I've changed my passwords, the phone company has shut down connectivity for the stolen one... I think I'm pretty much as safe as I can be. However, ...
6
votes
1answer
1k views

Why do App Locker apps need so many permissions? Am i safe?

I've been trying to password protect an app, and it seems that the permissions vary from app to app for App Lockers. Why do so many of them require full phone access? Is there any danger if i use a ...
0
votes
1answer
1k views

I forgot my lock pattern, how do I reset it? [duplicate]

Possible Duplicate: Recovering from forgotten lock pattern I have a Toshiba Thrive Android Table and I forgot what I used as my pattern lock. How do I reset it? Someone please help!
6
votes
2answers
3k views

OpenVPN with Android 2.3.x - security concerns

I need to use my Android 2.3.x phone to access an OpenVPN server. I have CM 7 with built in support for OpenVPN and tun. My main concern is that I don't know where to put the keys in. If my phone gets ...
22
votes
5answers
11k views

My phone was just stolen an hour or so ago. Are there any options for tracking?

I realize this is a long shot, but my phone was lost or stolen a few hours ago. At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my ...
4
votes
1answer
5k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...
3
votes
0answers
170 views

A data forensic tools for android [closed]

I have recently taken interest in digital forensics. What is the best tool, or set of tools to obtain and analyze images of android phones?
4
votes
2answers
900 views

How can I detect Malware and/or viruses?

I'm buying a used Droid phone (Verizon) that has been rooted. Is there anyway to scan it for viruses (and more importantly) malware? Or maybe even a firewall? (I may be being overcautious). Some ...
0
votes
5answers
4k views

Locking SDHC Memory card on Samsung Galaxy 2

I have stored an important document on the SDHC card on my Samsung Galaxy 2 phone (so that I can edit it on the go). I don't want others to access this file or document without my permission. I know ...
6
votes
1answer
109 views

Secure keyboard application from android market

Is it safe to install a keyboard application from android market that asks full internet access permission? Will it not lead to certain security risks? There are several free and paid keyboards that ...
4
votes
5answers
767 views

Erasing SD Card contents and personal data

I have an SD card in my Droid Global or Droid X, not exactly sure which model. I go to the files and click on the SD card instead of shred files and delete all of its contents. I then go to Privacy ...
7
votes
2answers
1k views

How can I securely store my private key I use for logging into my home PC

I've been told that the SD card is a terrible place to store secure data because any app can read it. How else can my phone store my private key I use to log into my home PC ssh server?
8
votes
3answers
224 views

Is there a service that rates app security/permissions?

Is there a service/company/app that vets Android apps and reports on their "trustworthiness"? I recently moved from Blackberry to a Galaxy S2 which does not have an LED indicator light. I searched ...
15
votes
6answers
4k views

Is it reasonably safe to use PIN code for encryption?

On the Android 4.0 (Samsung Galaxy Nexus) there is a posibilty to encrypt the phone. I found this about the encryption on Android 3.0, is the same algorithms used in Android 4? ...
21
votes
5answers
9k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...
11
votes
1answer
3k views

How do I protect my phone from malicious apps once it is rooted?

I rooted my phone. Now if I use a Terminal Emulator such as Android Terminal Emulator, I noticed that I can can easily obtain root access without a password: $ id uid=10059(app_59) gid=10059(app_59) ...
4
votes
6answers
2k views

How do I lock my HTC whenever I want?

I have a HTC Wildfire S and set up the screen lock pattern for it. This triggers after some time but sometimes I want to lock it myself, for example if I leave the office and let my phone on the desk. ...
4
votes
2answers
837 views

My HTC Desire HD has been stolen. What data can still be accessed by the thief?

I have contacted the network and had the phone barred, I had applied a screen lock. I am concerned however if the thief can still access all my numbers, texts, saved passwords and most importantly ...
2
votes
1answer
6k views

How to force Gmail/Android to request password every time for google account [duplicate]

Possible Duplicate: Logout from Gmail on my device I have a Samsung Galaxy Ace running Android 2.3.3. Is it possible to force Gmail or any google related apps to request my password ...
5
votes
2answers
1k views

Encryption of offline mail, calendar, contacts data on Android

I'm very new to Android and I wonder what I can do in terms of encryption. As I read it seems that only Android >= 2.3.3 supports encryption but my new device will be running Android 2.3.1. So I ...
6
votes
1answer
6k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
2
votes
1answer
545 views

How to prevent data extraction from rooted phone via adb?

I've a question regarding security in a rooted device. Being superuser means that you can access the /data/data directory, and that's a lot of personal data (I think it is almost all the data there ...
7
votes
3answers
283 views

Is it possible to track what information on your phone an app is uploading?

If you are concerned about what information an app is sending about you (your privacy concerns) is there any way of tracking this? Can you see if an app is sending photos on your phone? Can you see if ...
7
votes
3answers
5k views

How to delete a specific file in Android so that it can't be recovered?

From my experience a file deleted from a computer filesystem can often be recovered unless it is overwritten with a special program (that's usually called "shredding"). Is an Android-based HTC ...
3
votes
1answer
149 views

What are potential problems/violations that malware apps can do?

There are some apps that I am considering to download which have many permission requirements and have few comments from other past users. The number of downloads are relatively low so I am ...
0
votes
1answer
785 views

How To Protect Mobile Internet Access?

I want to know how to protect mobile data connection function in Android. I don't want somebody or me accidentally switching it on. I need something like Smart AppLock but to protect basic phone ...
10
votes
1answer
4k views

How does android transfer with bump apps work?

I've come across several apps which allows the user to transfer data (like files, photos, contacts) when they "bump" their phones. An example is Bump, which use the the bump to transfer files and add ...
4
votes
1answer
260 views

Can an Android device be locked down by an administrator?

I would like to know if it is possible to use android devices in a work environment with restrictions on the phones usage. These phones would be given to members in the field to log data, and only ...
9
votes
2answers
6k views

Can Android phones be set to automatically wipe all data after a certain amount of failed logins without an app?

A new policy at my work is being drafted regarding email access on phones. A requirement will be that the phone must automatically have all data erased after a certain amount of failed login attempts. ...
1
vote
2answers
983 views

Is my Exchange email encrypted on my device?

If I setup an email synchronization with our Exchange server, is the mail I store on my phone encrypted or readible if someone finds/steals my phone? I have enabled the unlock password (although it's ...
9
votes
2answers
9k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
3
votes
1answer
795 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
8
votes
1answer
150 views

Locking down an Android device?

I'm interested in locking down an Android, so the user can only access a particular app (bonus points: only allow them to access the browser app, and only allow one website from within that). How ...
3
votes
3answers
1k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? ...
11
votes
3answers
8k views

Force VPN usage?

On an android phone, stock or modded rom, is it possible to force the use of VPN? E.g. only allow traffic tunneled by VPN, don't allow traffic without using VPN to make sure that no unencrypted ...
-2
votes
2answers
143 views

How can I turn off Wi-Fi in Android?

When my wireless is turned off, and I get near an open wireless network, it automatically connects to it. (Why?) How can I completely turn off the Wi-Fi so that my phone will not do such insecure ...
11
votes
2answers
879 views

Which disk encryption standard is used in Honeycomb?

Does anyone posses an official or un-official information on which encryption standard is used in Honeycomb "encrypt tablet" option? Is there an information on any hacks or backdoors, placed for law ...
2
votes
1answer
244 views

Is it possible to use Prey on a non-phone device?

This answer to a question asked earlier today reminded me that I had been wanting to check out Prey because I had heard some good things about it. I ended up installing it and creating an account, but ...
39
votes
10answers
12k views

Is there a way to block access to or wipe my Google data for a lost/stolen phone

If my phone was ever lost or stolen, my only real concern is data and apps associated with my Google account, such as my Gmail, the ability to purchase apps from the Market, and maybe Picasa albums. ...
5
votes
3answers
365 views

Is there an Android app that scans a device for vulnerability issues?

Is there an application that scan the phone or the phone image searching for vulnerability issues? In the internet there are several tools that make Network scanning, but I found nothing specific for ...
6
votes
1answer
286 views

Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?

As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
1
vote
1answer
123 views

Is there an Android known issues database?

Does anyone know if there is a Known Issues Database for Android, or some tool that one could search for known issues based on the version of some parts of the code such as the kernel.
5
votes
2answers
325 views

In general, do Android apps use encrypted connections? If so, is public WiFi safer?

I know that connecting to public WiFi carries risks. I know that much of the risk has to do with sending data over a public connection, allowing it to be intercepted. So, my question is, do most ...
10
votes
2answers
279 views

Does the official Google Plus Android client use HTTPS for automatic photo upload?

I'm at a conference using their (open) wifi. Normally I don't bother to tunnel my connection because I figure anything I care about (email, banking, etc.) goes over SSL/HTTPS anyway. It occurred to ...
6
votes
1answer
149 views

How do Android devices receive security updates?

I'm new to Android and I'm thinking about buying an entry-level Android device. Yesterday I read that Android passwords are stored in plain text. That got me to thinking... how do Android devices get ...
3
votes
2answers
166 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...