For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

10
votes
3answers
7k views

Force VPN usage?

On an android phone, stock or modded rom, is it possible to force the use of VPN? E.g. only allow traffic tunneled by VPN, don't allow traffic without using VPN to make sure that no unencrypted ...
-2
votes
2answers
142 views

How can I turn off Wi-Fi in Android?

When my wireless is turned off, and I get near an open wireless network, it automatically connects to it. (Why?) How can I completely turn off the Wi-Fi so that my phone will not do such insecure ...
11
votes
2answers
869 views

Which disk encryption standard is used in Honeycomb?

Does anyone posses an official or un-official information on which encryption standard is used in Honeycomb "encrypt tablet" option? Is there an information on any hacks or backdoors, placed for law ...
2
votes
1answer
241 views

Is it possible to use Prey on a non-phone device?

This answer to a question asked earlier today reminded me that I had been wanting to check out Prey because I had heard some good things about it. I ended up installing it and creating an account, but ...
38
votes
10answers
10k views

Is there a way to block access to or wipe my Google data for a lost/stolen phone

If my phone was ever lost or stolen, my only real concern is data and apps associated with my Google account, such as my Gmail, the ability to purchase apps from the Market, and maybe Picasa albums. ...
5
votes
3answers
347 views

Is there an Android app that scans a device for vulnerability issues?

Is there an application that scan the phone or the phone image searching for vulnerability issues? In the internet there are several tools that make Network scanning, but I found nothing specific for ...
6
votes
1answer
280 views

Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?

As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
1
vote
1answer
119 views

Is there an Android known issues database?

Does anyone know if there is a Known Issues Database for Android, or some tool that one could search for known issues based on the version of some parts of the code such as the kernel.
5
votes
2answers
312 views

In general, do Android apps use encrypted connections? If so, is public WiFi safer?

I know that connecting to public WiFi carries risks. I know that much of the risk has to do with sending data over a public connection, allowing it to be intercepted. So, my question is, do most ...
10
votes
2answers
272 views

Does the official Google Plus Android client use HTTPS for automatic photo upload?

I'm at a conference using their (open) wifi. Normally I don't bother to tunnel my connection because I figure anything I care about (email, banking, etc.) goes over SSL/HTTPS anyway. It occurred to ...
6
votes
1answer
145 views

How do Android devices receive security updates?

I'm new to Android and I'm thinking about buying an entry-level Android device. Yesterday I read that Android passwords are stored in plain text. That got me to thinking... how do Android devices get ...
3
votes
2answers
151 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
4
votes
3answers
1k views

Are Tmobile using bogus DoD IP addresses (bogons)?

I recently started picking up some weird entries in my firewall log: kernel: arplookup 26.XXX.XXX.XXX failed: host is not on local network There are at least at dozen entries, all to different IP's ...
10
votes
2answers
9k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
4
votes
1answer
146 views

different way of securing applications

In my phone instead of unlocking screen by providing "symbol", I'd like the phone to unlock to most of my applications without the "symbol". But for selected important applications (eg. gmail) I'd ...
6
votes
2answers
737 views

How secure are the “app password protection” apps?

I know there are a number of apps available that can password protect specified apps. I want to know how secure they really are. As far as I know, there aren't any exposed OS hooks in android to ...
21
votes
3answers
6k views

What are the security disadvantages of rooting an Android phone?

I know there was a discussion previously BUT they didn't talk about security. E.g.: if I root my phone will all my apps run with root permission? Related: Are there any risks to rooting a device?
22
votes
1answer
13k views

How can I verify the authenticity of an apk file I downloaded?

The latest update of Google Maps is unavailable in my country, so I downloaded a version by googling for "Google Maps 5.4.0 apk". I did in fact find it, but now I wonder how I can tell if this is in ...
14
votes
2answers
2k views

Is there any way to erase personal information from my phone that has already been stolen?

My phone has been stolen. I do not want the thief to have access to any of my personal information such as calls, texts, and information saved in the phones contents. Is there any possible way I can ...
8
votes
1answer
1k views

Full encryption with Android?

I have an LG GT540 Optimus with Android. How can I encrypt all my filesystems to ensure that if it gets stolen, no one will get my passwords, contacts, etc.. :\ ? Thank you!
3
votes
4answers
3k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
5
votes
3answers
157 views

Is there a standard place for the Owner Information on an Android phone?

I found an lost Android phone - is there a standard place on Android phones for owner information so I can contact the person who lost it?
8
votes
3answers
2k views

Biometric-security lock-screen?

Is there a way to apply a biometric lock (as in, a look screen) to an Android device? e.g. the unlocker has to pass a fingerprint / retina / voice scan. I've read about startup companies and general ...
1
vote
2answers
298 views

Questions about Samsung Galaxy S security applications

Hello I would like to know whether is it recommended to have some antiVirus+firewall application for this current phone? (I usually open email attachments for example) 1.Do these applications runs ...
2
votes
3answers
696 views

Application for remote-wiping a lost phone without handing access to my data to a third-party?

Or having to pay a subscription? I have an idea for a hypothetical Android app. Tell me if such a thing already exists. You install a server in a machine you have total control of, and is ...
7
votes
3answers
585 views

How do permissions work in the Android Market?

I've been told that the permissions for an app are there to inform me the types of things the app has permission to do. If this is right, can a developer 'forget' a permission and get away with using ...
6
votes
1answer
1k views

Is there an official dialer code resource?

There are a ton of XDA forums and a decent number of answers here that refer to specific dialer codes. For instance *#*#4636#*#* will cause unicorns to spring forth from your phone or tell you what OS ...
7
votes
3answers
546 views

Call Encryption

Is it possible to encrypt calls on Android OS? How do I do that?
4
votes
1answer
1k views

I want to password lock my “Applications” settings, but no other settings

I have an AppLock program that locks certain apps with a PIN. In order for the app to have any effectiveness, I include Settings as an App to lock. Otherwise, I could go to Settings -> ...
0
votes
1answer
648 views

Are there any “iptables like” firewall for Android? [duplicate]

Possible Duplicate: Are there any good firewalls available? How can i make my Android more secure with a firewall? Are there any legal/offical ways to do it? Thank you!
14
votes
7answers
5k views

Are the apps safe? How can I make my Android more secure?

Are the apps on the Android Market checked or audited? If I search Google for "hardening Android", the best hit I can find is Google Android Hardening Checklist. What's your opinion regarding this? ...
12
votes
3answers
4k views

How would you uninstall a rogue Home (Launcher) application?

If you were to install a Home Screen application that does not give you access to the System Settings screen (to go to Manage Applications), and also does not let you launch Apps (such as the Market ...
7
votes
3answers
313 views

How can I prevent android apps from reformatting my SD card?

I have a 32GB micro SD card, and some of the apps I use state that they have permsisions to modify sd card memory. I have a lot of personal files on my card, and the other day, some app, I don't know ...
7
votes
2answers
210 views

Where should I submit bug reports for the pattern lock?

I believe i found a bug with the pattern lock. Where should I submit bug reports for the pattern lock? Note: this might just be a Sense thing: Create a pattern lock. Lock phone. Wake phone draw ...
17
votes
5answers
3k views

Open source app for remote wiping Android phone?

I recently lost my android phone, and regretted not having a remote wipe app installed. However, I do not trust 3rd party compiled apps with such power (too many weak links). Does anyone know of an ...
15
votes
0answers
1k views

Security risks of rooting your android smartphone [duplicate]

Possible Duplicate: Are there any risks to rooting a device? What are the security risks specific to rooting your android smartphone? Are there any security exploits available because you ...
3
votes
1answer
870 views

is it possible to use a CA-Cert for serverauthentification in WPA enterprise networks with android 2.2+?

I just wanted to know if it is possible with android 2.2+ to use a ca-cert for server auth in WPA-Enterprise networks? A fried told me it is not possible, but this would mean there would be a mayor ...
2
votes
1answer
60 views

Are there any issues with having multiple phone finding applications?

I like to use Prey and have no complaints about it so far. However, our carrier also offers Mobile Recovery, which does a lot of the same things (GPS locations, etc). Is there any harm in having ...
4
votes
1answer
676 views

Data Vault apps with Unlock Pattern

I'm currently using the Wallet app to keep my bank acct#s, CC#s etc. safely on my phone. However, entering the password when I need to unlock the codes is kind of an annoyance. Specially when you ...
4
votes
1answer
158 views

Is there a way to control app execution environment?

Is there some way of controlling how an installed application communicates over the network and writes data to disk? Let's say I have an application that will handle sensitive data, but it comes from ...
4
votes
2answers
659 views

Stop droid x from security locking during a call

I have noticed that when I am on a lengthy call on my Droid X, the phone locks itself. This seems to happen within the expected timeout period, so I don't believe that the phone is malfunctioning. ...
9
votes
6answers
3k views

App/shortcut to quickly change screen lock type?

Two scenarios: I'm at a "trusted" place, and don't want to enter unlock password/pattern all the time I'm at an "untrusted" place and want my phone to be password/pattern screen locked is there ...
5
votes
2answers
554 views

Set a profile in Tasker to wipe the phone

Is it possible to create a profile in Tasker that completely wipes the phone? I ask because I haven't tried Tasker yet, and this might be enough to make me buy it. It doesn't matter how this profile ...
18
votes
3answers
8k views

Does official Gmail app use a secure connection?

As simple as that, when I'm using the official Gmail app to access my email account, does it use a secure connection?
2
votes
1answer
846 views

Are IPv6 Privacy Extensions supported and how can they be enabled/disabled?

I just read about a potential privacy issue with IPv6 addresses on phones. While the article mainly talks about Apple devices, Android is mentioned so I wonder: Does Android support IPv6 privacy ...
17
votes
4answers
910 views

I have sold my phone on eBay. What should I do before I send it off?

I have an Android phone which I just sold on eBay. What measures should I take before posting it off to its new home? Please answer thoroughly!
31
votes
3answers
2k views

Encrypt the phone's internal storage

Is there a way to encrypt my phone's internal memory, in the same way you would encrypt a computer's partition? Ideally, the phone would always ask for the password when booting, and even if someone ...
3
votes
2answers
309 views

Questions About Android Privacy

The permissions warning in the Android Market is very vague. As well, I can't see the app permissions in a collective area of all the apps I have previously installed. So, I have no clue whether an ...
11
votes
3answers
25k views

How can I override the Device Administrator security policy so that I can disable the lock screen?

On Android 2.2 Froyo, I added my Corporate Exchange Email account to the phone, however, the security policy set by the "Device Administrator" requires that I enter a 4-digit PIN at the lock screen ...
8
votes
2answers
262 views

Android and antiviruses

This is actually three questions: Are anti-viruses needed for smartphones running Android OS? Is the Android Market absolutely safe (because all precatuions are taken by Google to prevent any ...