For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
0answers
14 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
1
vote
2answers
701 views

How can I disable the screen lock password in lollipop?

I have enabled password protection on the lock screen on my Nexus 5 Lollipop device: After enabling password, I can't seem to be able to cancel it. Any idea how to go back to None or Swipe?
2
votes
1answer
58 views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...
2
votes
4answers
1k views

Securing Memory Card?

What should I do so that the Memory card in my phone works only in my phone? Also, I should be able to connect my mobile to a PC through a USB cable and completely see/edit/organize the data on my ...
5
votes
2answers
6k views

Bypass “Swipe up to unlock” on Android Lollipop lock screen

I recently flashed my Nexus 4 to Android Lollipop using the factory image. I have set a pattern lock for unlocking the device. But whenever I turn on the phone, I have to click on the little lock ...
0
votes
1answer
107 views

Used device manager once, now I can't set security to 'none'

Phone is an LG Nexus. I was messing around with security settings and decided to try using a pattern to unlock my phone. No more than 5 minutes later, I completely forget the pattern I set. Did some ...
8
votes
4answers
2k views

Biometric-security lock-screen?

Is there a way to apply a biometric lock (as in, a look screen) to an Android device? e.g. the unlocker has to pass a fingerprint / retina / voice scan. I've read about startup companies and general ...
2
votes
2answers
23k views

How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?

There are a load of sites that do this now, and it's really annoying: I visit a content site on my Android device. 10-15 seconds after loading starts the site hangs for a few seconds. Google play ...
0
votes
0answers
11 views

Where is Face Unlock?

I installed Titanium Backup and found Face Unlock (Settings) in the file list but I can't find it anywhere on the phone.I checked the settings menu and Security but I still can't find the interface to ...
1
vote
1answer
530 views

forgot my google account password

someone used my phone GT-S5300 and had wrongly tried the unlock pattern many times and now it is asking me for google account but i have forgotten my password. pliz suggest me how can i get my ...
1
vote
2answers
3k views

Razr Maxx HD, How to wipe data with broken screen

My screen is totally destroyed, it's black and unresponsive. The phone turns on just fine, though. I just got my new phone and I have to send this one back now. I want to wipe the phone before I send ...
0
votes
2answers
163 views

How do I re-enable swipe to unlock?

I recently encrypted my Android 4.4.2 device (S4 Active) and have now unencrypted it. However the only options I still have to unlock my phone are PIN and Password. When I attempt to change it it now ...
1
vote
1answer
640 views

ActiveSync/Exchange security policy

On my HTC DNA I recently changed from the integrated ActiveSync client to Touchdown. My corporate IT policy required a PIN to access the device when using the Android client. Now that I switched to ...
0
votes
0answers
36 views

Security of Android cryptography in versions < 5.0 against government agencies

Recently, both Google and Apple announced their new OSes encrypt the device by default. This caused a lot of complaints from government agencies. Let me quote an article ...
0
votes
1answer
12 views

Can a locked phone's data be accessed when being repaired?

I had an HTC One S device which suddenly turned off and refused to start. On giving to the service centre, it turns out the device needs replacement of an item 'PCBA-MAIN BOARD WITH SKU ID MS' which ...
8
votes
2answers
7k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
1
vote
1answer
276 views

Does rooting phone affect online banking security? [duplicate]

I'm thinking of rooting my android phone (HTC Desire 300) and was wondering if doing so would affect the internet security with stuff like online banking. Is it still secure to do my banking on a ...
0
votes
0answers
14 views

Nmap my device and find many open port, is these secure?

I use nmap to scan the open port of my android open port. To my surprise, the list is long ( attached below ). Is this normal? Are all these secure? I am using Android 4.4. The rom is cm11. PORT ...
16
votes
3answers
4k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
21
votes
4answers
10k views

My phone was just stolen an hour or so ago. Are there any options for tracking?

I realize this is a long shot, but my phone was lost or stolen a few hours ago. At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my ...
3
votes
1answer
4k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
0
votes
1answer
1k views

Securely wiping a phone with a broken screen

I have a Samsung Galaxy S3 with a broken screen. The screen does not respond to any touch and does not display anything at all, it is black at all times. CyanogenMod 11 is installed on the device. I ...
1
vote
0answers
29 views

Where do you publish information about a vulnerability you have found within android?

I found a small vulnerability within the default web browser, here is the ticket. Submitted last year. Issue 42647: Android Web Browser, JavaScript Popup Bug. Tested on 11 Jan 2013. ...
2
votes
3answers
2k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
0
votes
0answers
15 views

How can I detect the PIN has been entered incorrectly three times in Tasker?

I now have tasker on my phone and would like to set up a three strikes pass/pin profile. I want the phone to power off and encrypt when my pin is input incorrectly three times. The encryption part is ...
0
votes
1answer
40 views

Alarm is working even when the phone is powered off

I just discovered that if I set the alarm clock and then power off the phone (by holding the power button and then selecting "Power Off") the alarm will still go off when the time comes. Is this ...
1
vote
1answer
2k views

How to remove an account from Google Hangouts?

I logged in to Google Hangouts using an account (which is NOT the account I use in play store). But now I cannot remove it. I can sign out, but to sign back in, it does not for the password and ...
2
votes
1answer
2k views

Android 4.1.2 Full Device Encryption

I have a FDE enabled on my Android. However on JellyBean when device restarts I never get a boot password prompt,just regular unlock screen. I remember on 4.0 ICS, after reboot Android would ask me ...
1
vote
1answer
2k views

Android 4 don't require unlock at home

In the Android OS version 4, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting ...
1
vote
2answers
14k views

How to disable pin security from Samsing Tab 2

I have a Samsung tab2, and have added screen pin lock on my Tab few days back as I was going out. Now I don't want to use pin lock as security, but I am not able to disable it. I am going to setting ...
0
votes
1answer
58 views

Rooted phone, but can't pass “Install” dialog

I am running Android 4.4.4 with the LiquidSmooth ROM and SuperSU. All these components work flawlessly, as far as I can tell. I am also able to use TitanicBackup (to demonstrate Root is working). ...
14
votes
3answers
2k views

Is there any way to erase personal information from my phone that has already been stolen?

My phone has been stolen. I do not want the thief to have access to any of my personal information such as calls, texts, and information saved in the phones contents. Is there any possible way I can ...
2
votes
1answer
69 views

How can access on an android device be restricted to applications or widgets on the home screen only?

This is a rooted Nexus 7 with 4.4.4 (factory image from Google). I'd like to restrict access to anything that's not on one of the home screens. Apps and widgets on one the home screens should be ...
0
votes
2answers
305 views

Does encryption, factory reset, encryption make a safer used phone?

I recently purchased a used Moto X. I know the person I bought it from so I'm not terribly worried but here is my idea to shore up the security on a used device. Don't put in your SIM card or log ...
0
votes
0answers
44 views

Control Mobile via pc using USB (No URL Control)

I want to control the mobile via pc using usb cable, I found out lot many solution like Droid@Screen & AndroidScreenMonitor etc., but this is an one way communication am not able to control from ...
0
votes
0answers
37 views

How to obtain crypto header and footer from Nexus 5 Android 4.4

I'm interested in how to find the crypto_header and crypto_footer for disk encryption on a Nexus 5. A lot of articles have them for specific devices and I was wondering if there was any information on ...
0
votes
2answers
465 views

.htaccess protected HTML5 videos not playing

I have videos in a directory which is protected through .htaccess. I want to deliver the videos by means of the <video> tag. Here is an example: protected video Use test/test to login. ...
1
vote
2answers
41 views

Do old versions of Android still get security patches?

For example if a critical vulnerability is found in Jelly Bean would it get a patch, or is the expectation that users should upgrade to KitKat to be more secure? Does Android even have the concept of ...
0
votes
0answers
134 views

How to use the S5 fingerprint scanner with full device encyption?

I am using the S5 and have decide to fully encrypt the device and the sd card. My biggest problem is that now the fingerprint is no a possible choice as a lockscreen security. Only password. I ...
1
vote
0answers
29 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
1
vote
1answer
128 views

Which Android version/phone can control per-app access permission?

The only reason I am still using an iPhone is due to the fact that most Android phones did not allow control of per-app access permission. The App Ops feature was once there but pulled. I know some ...
1
vote
1answer
198 views

How to disable “security policy restricts use of html email”

I use AirWatch Agent and created an ActiveSync account to connect to my company's exchange server. Now, when I read emails they show up as plain text with the message "security policy restricts use of ...
2
votes
1answer
7k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
1answer
68 views

Secure ADB connection over network

I am using Geniatech ATV Android Set Top Boxes running android 4.2.2 for a current project. I might put some of those devices in public places like shopping centers. These boxes are connected to the ...
2
votes
0answers
68 views

Customer claims our app trashed her phone [closed]

I'm in receipt of a complaint that the android mobile app my company provides has trashed a customer's android phone to the extent that it is now only capable of making phone calls. No sms. No ...
0
votes
0answers
26 views

Which versions of Android is Google developing security fixes for?

I'm trying to develop a BYOD support policy for the company I work for. We intend to only allow devices and software that are actively being supported by the manufacturer. I know that the relationship ...
0
votes
0answers
19 views

Ask for the pin only twice a day

I would like to configure my android phone to ask for my PIN only two times every day (if not rebooted). Screen lock with PIN after 12 hours (no PIN needed in between) would be great. The screen-lock ...
-1
votes
1answer
25 views

Any work around to sophos

Sophos is an app that let's you put passwords on apps (among other things). Is there a work around to access the apps? Thanks!
1
vote
1answer
24 views

Security, keylogging and accounts

An in-app purchase requests password verification before the transaction. Thus, all the following input into the onscreen keyboard is the user's password. Is handling keyboard events prevented at ...
9
votes
3answers
14k views

Why does Android prompt me with “Enter the credential storage password” when I attempt to connect to a secured WiFi network?

When I connect my iPhone to a secured WiFi network (at work), I'm prompted for my Username and Password. (And then I'm prompted to accept what I presume is an SSL certificate.) But when I select the ...