For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

15
votes
6answers
3k views

Is it reasonably safe to use PIN code for encryption?

On the Android 4.0 (Samsung Galaxy Nexus) there is a posibilty to encrypt the phone. I found this about the encryption on Android 3.0, is the same algorithms used in Android 4? ...
21
votes
5answers
8k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...
11
votes
1answer
3k views

How do I protect my phone from malicious apps once it is rooted?

I rooted my phone. Now if I use a Terminal Emulator such as Android Terminal Emulator, I noticed that I can can easily obtain root access without a password: $ id uid=10059(app_59) gid=10059(app_59) ...
4
votes
6answers
2k views

How do I lock my HTC whenever I want?

I have a HTC Wildfire S and set up the screen lock pattern for it. This triggers after some time but sometimes I want to lock it myself, for example if I leave the office and let my phone on the desk. ...
4
votes
2answers
811 views

My HTC Desire HD has been stolen. What data can still be accessed by the thief?

I have contacted the network and had the phone barred, I had applied a screen lock. I am concerned however if the thief can still access all my numbers, texts, saved passwords and most importantly ...
2
votes
1answer
5k views

How to force Gmail/Android to request password every time for google account [duplicate]

Possible Duplicate: Logout from Gmail on my device I have a Samsung Galaxy Ace running Android 2.3.3. Is it possible to force Gmail or any google related apps to request my password ...
5
votes
2answers
987 views

Encryption of offline mail, calendar, contacts data on Android

I'm very new to Android and I wonder what I can do in terms of encryption. As I read it seems that only Android >= 2.3.3 supports encryption but my new device will be running Android 2.3.1. So I ...
6
votes
1answer
5k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
2
votes
1answer
527 views

How to prevent data extraction from rooted phone via adb?

I've a question regarding security in a rooted device. Being superuser means that you can access the /data/data directory, and that's a lot of personal data (I think it is almost all the data there ...
7
votes
3answers
281 views

Is it possible to track what information on your phone an app is uploading?

If you are concerned about what information an app is sending about you (your privacy concerns) is there any way of tracking this? Can you see if an app is sending photos on your phone? Can you see if ...
7
votes
3answers
5k views

How to delete a specific file in Android so that it can't be recovered?

From my experience a file deleted from a computer filesystem can often be recovered unless it is overwritten with a special program (that's usually called "shredding"). Is an Android-based HTC ...
3
votes
1answer
143 views

What are potential problems/violations that malware apps can do?

There are some apps that I am considering to download which have many permission requirements and have few comments from other past users. The number of downloads are relatively low so I am ...
0
votes
1answer
735 views

How To Protect Mobile Internet Access?

I want to know how to protect mobile data connection function in Android. I don't want somebody or me accidentally switching it on. I need something like Smart AppLock but to protect basic phone ...
10
votes
1answer
4k views

How does android transfer with bump apps work?

I've come across several apps which allows the user to transfer data (like files, photos, contacts) when they "bump" their phones. An example is Bump, which use the the bump to transfer files and add ...
4
votes
1answer
255 views

Can an Android device be locked down by an administrator?

I would like to know if it is possible to use android devices in a work environment with restrictions on the phones usage. These phones would be given to members in the field to log data, and only ...
9
votes
2answers
6k views

Can Android phones be set to automatically wipe all data after a certain amount of failed logins without an app?

A new policy at my work is being drafted regarding email access on phones. A requirement will be that the phone must automatically have all data erased after a certain amount of failed login attempts. ...
1
vote
2answers
955 views

Is my Exchange email encrypted on my device?

If I setup an email synchronization with our Exchange server, is the mail I store on my phone encrypted or readible if someone finds/steals my phone? I have enabled the unlock password (although it's ...
8
votes
2answers
7k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
3
votes
1answer
783 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
8
votes
1answer
146 views

Locking down an Android device?

I'm interested in locking down an Android, so the user can only access a particular app (bonus points: only allow them to access the browser app, and only allow one website from within that). How ...
3
votes
3answers
1k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? ...
11
votes
3answers
7k views

Force VPN usage?

On an android phone, stock or modded rom, is it possible to force the use of VPN? E.g. only allow traffic tunneled by VPN, don't allow traffic without using VPN to make sure that no unencrypted ...
-2
votes
2answers
142 views

How can I turn off Wi-Fi in Android?

When my wireless is turned off, and I get near an open wireless network, it automatically connects to it. (Why?) How can I completely turn off the Wi-Fi so that my phone will not do such insecure ...
11
votes
2answers
875 views

Which disk encryption standard is used in Honeycomb?

Does anyone posses an official or un-official information on which encryption standard is used in Honeycomb "encrypt tablet" option? Is there an information on any hacks or backdoors, placed for law ...
2
votes
1answer
241 views

Is it possible to use Prey on a non-phone device?

This answer to a question asked earlier today reminded me that I had been wanting to check out Prey because I had heard some good things about it. I ended up installing it and creating an account, but ...
39
votes
10answers
11k views

Is there a way to block access to or wipe my Google data for a lost/stolen phone

If my phone was ever lost or stolen, my only real concern is data and apps associated with my Google account, such as my Gmail, the ability to purchase apps from the Market, and maybe Picasa albums. ...
5
votes
3answers
356 views

Is there an Android app that scans a device for vulnerability issues?

Is there an application that scan the phone or the phone image searching for vulnerability issues? In the internet there are several tools that make Network scanning, but I found nothing specific for ...
6
votes
1answer
282 views

Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?

As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
1
vote
1answer
120 views

Is there an Android known issues database?

Does anyone know if there is a Known Issues Database for Android, or some tool that one could search for known issues based on the version of some parts of the code such as the kernel.
5
votes
2answers
319 views

In general, do Android apps use encrypted connections? If so, is public WiFi safer?

I know that connecting to public WiFi carries risks. I know that much of the risk has to do with sending data over a public connection, allowing it to be intercepted. So, my question is, do most ...
10
votes
2answers
276 views

Does the official Google Plus Android client use HTTPS for automatic photo upload?

I'm at a conference using their (open) wifi. Normally I don't bother to tunnel my connection because I figure anything I care about (email, banking, etc.) goes over SSL/HTTPS anyway. It occurred to ...
6
votes
1answer
147 views

How do Android devices receive security updates?

I'm new to Android and I'm thinking about buying an entry-level Android device. Yesterday I read that Android passwords are stored in plain text. That got me to thinking... how do Android devices get ...
3
votes
2answers
159 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
4
votes
3answers
2k views

Are Tmobile using bogus DoD IP addresses (bogons)?

I recently started picking up some weird entries in my firewall log: kernel: arplookup 26.XXX.XXX.XXX failed: host is not on local network There are at least at dozen entries, all to different IP's ...
10
votes
2answers
10k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
4
votes
1answer
147 views

different way of securing applications

In my phone instead of unlocking screen by providing "symbol", I'd like the phone to unlock to most of my applications without the "symbol". But for selected important applications (eg. gmail) I'd ...
6
votes
2answers
751 views

How secure are the “app password protection” apps?

I know there are a number of apps available that can password protect specified apps. I want to know how secure they really are. As far as I know, there aren't any exposed OS hooks in android to ...
22
votes
3answers
6k views

What are the security disadvantages of rooting an Android phone?

I know there was a discussion previously BUT they didn't talk about security. E.g.: if I root my phone will all my apps run with root permission? Related: Are there any risks to rooting a device?
23
votes
1answer
14k views

How can I verify the authenticity of an apk file I downloaded?

The latest update of Google Maps is unavailable in my country, so I downloaded a version by googling for "Google Maps 5.4.0 apk". I did in fact find it, but now I wonder how I can tell if this is in ...
14
votes
3answers
2k views

Is there any way to erase personal information from my phone that has already been stolen?

My phone has been stolen. I do not want the thief to have access to any of my personal information such as calls, texts, and information saved in the phones contents. Is there any possible way I can ...
8
votes
1answer
1k views

Full encryption with Android?

I have an LG GT540 Optimus with Android. How can I encrypt all my filesystems to ensure that if it gets stolen, no one will get my passwords, contacts, etc.. :\ ? Thank you!
3
votes
4answers
3k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
5
votes
3answers
159 views

Is there a standard place for the Owner Information on an Android phone?

I found an lost Android phone - is there a standard place on Android phones for owner information so I can contact the person who lost it?
8
votes
4answers
2k views

Biometric-security lock-screen?

Is there a way to apply a biometric lock (as in, a look screen) to an Android device? e.g. the unlocker has to pass a fingerprint / retina / voice scan. I've read about startup companies and general ...
1
vote
2answers
299 views

Questions about Samsung Galaxy S security applications

Hello I would like to know whether is it recommended to have some antiVirus+firewall application for this current phone? (I usually open email attachments for example) 1.Do these applications runs ...
2
votes
3answers
707 views

Application for remote-wiping a lost phone without handing access to my data to a third-party?

Or having to pay a subscription? I have an idea for a hypothetical Android app. Tell me if such a thing already exists. You install a server in a machine you have total control of, and is ...
7
votes
3answers
591 views

How do permissions work in the Android Market?

I've been told that the permissions for an app are there to inform me the types of things the app has permission to do. If this is right, can a developer 'forget' a permission and get away with using ...
6
votes
1answer
1k views

Is there an official dialer code resource?

There are a ton of XDA forums and a decent number of answers here that refer to specific dialer codes. For instance *#*#4636#*#* will cause unicorns to spring forth from your phone or tell you what OS ...
7
votes
3answers
556 views

Call Encryption

Is it possible to encrypt calls on Android OS? How do I do that?
4
votes
1answer
1k views

I want to password lock my “Applications” settings, but no other settings

I have an AppLock program that locks certain apps with a PIN. In order for the app to have any effectiveness, I include Settings as an App to lock. Otherwise, I could go to Settings -> ...