For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

2
votes
2answers
847 views

How to browse securely, anonymously and without blocks on Android?

So here's your Average Joe at a coffee store, using the open Wifi on his shiny new Android phone. Obviously there are the same issues with using a laptop or any other device on an open network, ...
1
vote
0answers
164 views

How can you enable “Use secure credentials” from the shell

On the ICS ROM I'm using, the option to enable the secure credentials is missing from the menu, but the sub system seems to be there since Keystore Locker can communicate with it. So does anybody ...
8
votes
3answers
6k views

IMEI number publicly displayed whenever connected to Wifi

I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...
8
votes
2answers
11k views

Connecting to VPN forces having secure screen lock [duplicate]

Possible Duplicate: Transformer Prime, VPN and password protection I noticed that creating a VPN connection in ICS forces me to use a secure screen lock. I want to have Slide method for my ...
8
votes
1answer
344 views

Unsafe certificate protection in Android?

Maybe I'm wrong. If so, please let me know. Here is my question. I've followed the instructions here and installed my personal certificate stored in a pfx file (PKCS#12) in my Google Nexus (ICS ...
3
votes
1answer
582 views

Application-specific passwords only work for a short period of time

I have two-step verification enabled on my Google Account, and I generated an application-specific password for my Android device (Infuse 4G with custom ROM in case that's relevant), and input it. ...
5
votes
1answer
196 views

Do apps that access gmail only have write access or full gmail access (potential security risk?)

I use a backup app to backup SMS text messages to my GMail account registered on my HTC Desire Z Android 2.3 phone. The app requests access to the gmail account. But what does this actually mean? ...
2
votes
2answers
152 views

Can traffic be inspected through WiFi? [duplicate]

Possible Duplicate: If I use free WiFi in a hotspot, can data be easily sniffed? Let's say I am browsing an HTTP accessible web site (i.e. NOT HTTPS) , is the traffic encrypted through the ...
2
votes
0answers
310 views

Android detects SIM change – gmail synchronized messages deleted?

After gmail detects SIM change – it asks to renew login to gmail account. This is a very good security action. But does it maybe also clear synchronized messages (that have been downloaded before SIM ...
2
votes
0answers
122 views

IEEE 802.1AE (MACSec) support

Does Android support IEEE802.1AE MACSec ? This protocol enables data confidentiality and integrity over WiFi connections.
2
votes
1answer
785 views

Accessing the internal phone memory by swapping out the SIM card

Is it possible to access an Android phone's internal memory by switching out the SIM card? My Android phone, with no SD card, has been stolen but access to the phone is locked via the "graphical ...
4
votes
1answer
336 views

If I download and install a non-market application and then proceed remove it, does it mitigate any security issues?

If I downloaded a non-market application and installed it and discovered it may be malicious, does removing it from the list of applications completely discard it and help mitigate any security ...
1
vote
2answers
431 views

Should I be worried about applications with weird looking permissions? [duplicate]

Possible Duplicate: How important is it to review the permissions that an app is using? When I install apps from Android Market (Play Store now) there are some apps that require special ...
3
votes
2answers
4k views

Can applications be downloaded without a Google Account and without disabling security features?

If I wish to install applications such as Skype, DropBox, etc however without registering for a Google account, is that possible? If so, how do I install them without a Google account?
6
votes
1answer
231 views

Can my Google Docs app be secured?

I have sensitive information in my Google Docs. I enabled two-step verification with my Google account; but just noticed that Google DOCS on my phone doesn't require any type of PIN number or ...
18
votes
2answers
1k views

If I use free WiFi in a hotspot, can data be easily sniffed?

If I use my mobile device in a Wifi hotspot, can I take it that it bears the same risks as using a laptop in that data can be easily sniffed and that the mobile device is also open to ...
7
votes
2answers
194 views

Are firmware updates secure?

Now that mobiles are being used for payment systems, I'm more concerned about the security on my Android device. I would rather not be the first to be vulnerable to some malicious code that happened ...
7
votes
3answers
2k views

Any hack to get rid of the “Too many password attempts” lock?

My kids often play with my phone which has a pattern lock screen, and it gets locked due to many attempts, then the phone is locked out and requires a password. I use 2-step verification, so in ...
2
votes
2answers
622 views

Suspicious Permissions And A Safe Repository?

I have found older version of Facebook For Android app here which was hosted on geekfiles.in When i wanted to install 1.8.1 and checked permissions, the following arose my suspicions: Services that ...
1
vote
3answers
2k views

How safe is android compared to other mobile platforms?

Recently I get the impression malware is only present on Android (compared to other mobile platforms) as every IT news magazine reports only on Android malware. (I guess it is also involved with the ...
2
votes
3answers
2k views

Screen lock settings won't change on Ice Cream Sandwich with MS Exchange Email

I have a Samsung Galaxy Nexus running Android 4.0.2. I have a corporate email set up to Microsoft Exchange. My sys admin said we use the default mobile policies for Exchange, but he doesn't know the ...
8
votes
2answers
413 views

What is the best pre-stealing practice? [duplicate]

Possible Duplicate: Is there a way to block access to or wipe my Google data for a lost/stolen phone I would like to know what is the best/recommended practice to prepare myself to the day ...
5
votes
3answers
35k views

How do I decrypt files on my SD card that I encrypted using the Settings?

I have files that I used to copy from my SD card to my PC using the USB Mass Storage option under the "USB connection" pop-up. I checked the flag under Settings->Location & Security->Data ...
8
votes
1answer
9k views

Turning on encryption for an Android 4.0 device

I need to encrypt my full file system on Android device. From this link, I understand that Android provides support to enable full file system encryption based on a password but that need to be ...
6
votes
3answers
3k views

Can a thief unlock or otherwise access the data on my stolen Android device?

If my Android device is stolen, will the person who ends up with it be able to get my data by plugging it into a PC and using some trick? Is there anything I can do to prevent this or make it harder?
2
votes
3answers
1k views

Why does the Android device connect to a secured wireless router without providing a password?

During the weekend, I was able to connect to a secured wireless network via an Android device (Asus Transformer Tablet), but when I tried to connect to the wireless network via my laptop it was ...
5
votes
3answers
614 views

Is a PIN lock screen inherently more or less secure than an app lock program?

The two ways I see to secure an Android phone is through a PIN lock screen or through an app lock program (Password is too inconvenient and pattern is insecure for various reasons). The lock screen ...
4
votes
3answers
477 views

Can I use a pin/password/pattern lock and safely have basic phone functionality while in car?

I would like to lock my phone with a pin for additional security. Also, I try to minimize my phone usage in the car, but in the event that I do need to call someone, I would like to be able to do so ...
1
vote
0answers
362 views

How can i protect from FaceNiff? [closed]

I've seen what FaceNiff is able to do on unsecured Wi-Fi. So question is simple. How can i protect my phone against FaceNiff?
12
votes
2answers
4k views

How to protect my Google Account?

I am very concerned with security of my Google account in case I lose the phone (as in: lose it, have it stolen/robbed, etc.). Right now it seems that whoever grabs my phone will also have full access ...
2
votes
0answers
499 views

How to put a lock screen with security code on a Arnova 10 G 2?

I have a Arnova 10 G 2 with Android 2.3 which works very well, but it has no unlock screen and no security options. Does anyone know of a way to put some kind of security code on the device, either ...
8
votes
5answers
5k views

Remotely brick a stolen phone

If my phone is lost or stolen, can I remotely and permanently brick my phone. This way, not only is my data secure, but the resale value of the phone plummets to zero. Tangential question: can apps ...
19
votes
2answers
7k views

Stolen phone: is changing your GMail password enough?

My Galaxy phone got stolen today. Of course I blocked my SIM card and changed my password for GMail (and went to the police) but is this enough? Could the person that stole my phone still log in to ...
6
votes
3answers
50k views

Logout from Gmail on my device

It bothers me that my Android Phone is permanently logged into my Gmail account. I want to logout from the device and somehow make the phone ask for username/password when connecting to my account. ...
5
votes
4answers
10k views

How can I disable or password protect my device's 'factory reset' function?

Is there any way to prevent a factory reset, like password protection? I would basically like to protect my phone from resetting if it gets stolen.
12
votes
2answers
4k views

How can I make my phone/tablet ring remotely without a SIM card?

I appear to have lost my Streak somewhere in my apartment, and I can't call it since I don't have a SIM card in it. I've remotely installed Plan B just because, but unfortunately the GPS coordinates ...
40
votes
4answers
12k views

Just how secure is a pattern lock?

I recently had a phone stolen. It's been replaced, I've changed my passwords, the phone company has shut down connectivity for the stolen one... I think I'm pretty much as safe as I can be. However, ...
6
votes
1answer
1k views

Why do App Locker apps need so many permissions? Am i safe?

I've been trying to password protect an app, and it seems that the permissions vary from app to app for App Lockers. Why do so many of them require full phone access? Is there any danger if i use a ...
0
votes
1answer
1k views

I forgot my lock pattern, how do I reset it? [duplicate]

Possible Duplicate: Recovering from forgotten lock pattern I have a Toshiba Thrive Android Table and I forgot what I used as my pattern lock. How do I reset it? Someone please help!
6
votes
2answers
3k views

OpenVPN with Android 2.3.x - security concerns

I need to use my Android 2.3.x phone to access an OpenVPN server. I have CM 7 with built in support for OpenVPN and tun. My main concern is that I don't know where to put the keys in. If my phone gets ...
23
votes
5answers
11k views

My phone was just stolen an hour or so ago. Are there any options for tracking?

I realize this is a long shot, but my phone was lost or stolen a few hours ago. At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my ...
4
votes
1answer
6k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...
3
votes
0answers
172 views

A data forensic tools for android [closed]

I have recently taken interest in digital forensics. What is the best tool, or set of tools to obtain and analyze images of android phones?
4
votes
2answers
926 views

How can I detect Malware and/or viruses?

I'm buying a used Droid phone (Verizon) that has been rooted. Is there anyway to scan it for viruses (and more importantly) malware? Or maybe even a firewall? (I may be being overcautious). Some ...
0
votes
5answers
4k views

Locking SDHC Memory card on Samsung Galaxy 2

I have stored an important document on the SDHC card on my Samsung Galaxy 2 phone (so that I can edit it on the go). I don't want others to access this file or document without my permission. I know ...
6
votes
1answer
109 views

Secure keyboard application from android market

Is it safe to install a keyboard application from android market that asks full internet access permission? Will it not lead to certain security risks? There are several free and paid keyboards that ...
4
votes
5answers
873 views

Erasing SD Card contents and personal data

I have an SD card in my Droid Global or Droid X, not exactly sure which model. I go to the files and click on the SD card instead of shred files and delete all of its contents. I then go to Privacy ...
7
votes
2answers
1k views

How can I securely store my private key I use for logging into my home PC

I've been told that the SD card is a terrible place to store secure data because any app can read it. How else can my phone store my private key I use to log into my home PC ssh server?
8
votes
3answers
231 views

Is there a service that rates app security/permissions?

Is there a service/company/app that vets Android apps and reports on their "trustworthiness"? I recently moved from Blackberry to a Galaxy S2 which does not have an LED indicator light. I searched ...
16
votes
6answers
4k views

Is it reasonably safe to use PIN code for encryption?

On the Android 4.0 (Samsung Galaxy Nexus) there is a posibilty to encrypt the phone. I found this about the encryption on Android 3.0, is the same algorithms used in Android 4? ...