For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
0answers
4 views

How can I force a password prompt before factory reset?

Is there a way to force a password or some sort of identity verification before a factory reset is performed? If not, isn't a factory reset the obvious thing to do to prevent tracking (either via ...
0
votes
0answers
10 views

Which versions of Android is Google developing security fixes for?

I'm trying to develop a BYOD support policy for the company I work for. We intend to only allow devices and software that are actively being supported by the manufacturer. I know that the relationship ...
0
votes
0answers
16 views

Ask for the pin only twice a day

I would like to configure my android phone to ask for my PIN only two times every day (if not rebooted). Screen lock with PIN after 12 hours (no PIN needed in between) would be great. The screen-lock ...
15
votes
3answers
3k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
0
votes
1answer
12 views

Any work around to sophos

Sophos is an app that let's you put passwords on apps (among other things). Is there a work around to access the apps? Thanks!
2
votes
2answers
1k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
1
vote
1answer
14 views

Security, keylogging and accounts

An in-app purchase requests password verification before the transaction. Thus, all the following input into the onscreen keyboard is the user's password. Is handling keyboard events prevented at ...
2
votes
1answer
1k views

Android 4.1.2 Full Device Encryption

I have a FDE enabled on my Android. However on JellyBean when device restarts I never get a boot password prompt,just regular unlock screen. I remember on 4.0 ICS, after reboot Android would ask me ...
1
vote
1answer
1k views

Android 4 don't require unlock at home

In the Android OS version 4, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting ...
0
votes
0answers
27 views

How long does it take to brute force an X-letter encryption password? [closed]

I am using a CyanogenMod android phone with a fully encrypted disk that has a 9-letter password. Today I started updating my phone and made a backup of its contents, which is also encrypted with the ...
0
votes
0answers
14 views

Secure ADB connection over network

I am using Geniatech ATV Android Set Top Boxes running android 4.2.2 for a current project. I might put some of those devices in public places like shopping centers. These boxes are connected to the ...
9
votes
3answers
14k views

Why does Android prompt me with “Enter the credential storage password” when I attempt to connect to a secured WiFi network?

When I connect my iPhone to a secured WiFi network (at work), I'm prompted for my Username and Password. (And then I'm prompted to accept what I presume is an SSL certificate.) But when I select the ...
1
vote
1answer
73 views

How to remove an account from Google Hangouts?

I logged in to Google Hangouts using an account (which is NOT the account I use in play store). But now I cannot remove it. I can sign out, but to sign back in, it does not for the password and ...
5
votes
2answers
5k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
1
vote
5answers
1k views

Find what app is causing popups, NOT in notification bar

I am getting these popups regularly. They do not appear in the notification center so I can't find out what app is causing them. The only app I can think of that I have installed recently, I have ...
1
vote
5answers
6k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
1
vote
1answer
531 views

how to root your Android or at least understand how it works

I do not know exactly how rooting works or if it can even by done on my Android (Samsung GT-N8013) device. No rootkit appears to exist yet for Android 4.1.2, so I am left with figuring out how to ...
31
votes
3answers
2k views

Encrypt the phone's internal storage

Is there a way to encrypt my phone's internal memory, in the same way you would encrypt a computer's partition? Ideally, the phone would always ask for the password when booting, and even if someone ...
1
vote
3answers
4k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
0
votes
0answers
28 views

Web proxy for Android 4.2.2

I need to cut off access to Flash and HTML5 videos on several devices for a project. Is there any app like a proxy to perform this? If I could deny a list of webpages it will be perfect.
1
vote
1answer
27 views

Can I “Wipe data/Factory reset” a phone that doesn't even boot via USB?

I have a Razr HD (XT925 GSM) which suddenly shut down and can't be turned back on (pressing or long pressing the power button does nothing, nor does connecting it to the wall). I have a lot of ...
21
votes
4answers
9k views

My phone was just stolen an hour or so ago. Are there any options for tracking?

I realize this is a long shot, but my phone was lost or stolen a few hours ago. At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my ...
16
votes
1answer
12k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
2
votes
2answers
52 views

Allow login with multiple passwords

Is it possible to setup multiple accepted passwords for the login to Android? Or perhaps an alternative secure login. (Note: facial recognition and fingerprint does not count as secure, but an RSA/NFC ...
2
votes
1answer
6k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
3answers
51 views

How to know if an keyboard/input related app is safe to use

I am Vietnamese and I cannot type my language on my Android phone i.e. Samsung Galaxy S4 So I look for apps that help me to input Vietnamese. My issue is that I'm affraid the apps will bug me and ...
0
votes
1answer
36 views

Does encryption, factory reset, encryption make a safer used phone?

I recently purchased a used Moto X. I know the person I bought it from so I'm not terribly worried but here is my idea to shore up the security on a used device. Don't put in your SIM card or log ...
0
votes
2answers
14 views

can an android device be in danger on a malicious site?

I accidentally went onto a site via Google images and went off after half a second, (the page had been quarter/half loaded. I accidentally hit the undo button and it opened again, and I closed it ...
0
votes
0answers
30 views

Block all root connections except to certain IP destinations using Iptables

I am using rooted Android 4.4.4 system. I want to block all the network connections associated by processes that run by root except to certain Ip targets. Something like this Block all network ...
0
votes
1answer
31 views

How do I remove Selfmite worm?

In June this year I experienced what I've found to be called the "Selfmite" worm on my Nexus 5 smartphone. On 24.06 and 29.06 it sent the message "Dear [contact name], Look The Self-time, ...
6
votes
2answers
17k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
1
vote
1answer
593 views

ActiveSync/Exchange security policy

On my HTC DNA I recently changed from the integrated ActiveSync client to Touchdown. My corporate IT policy required a PIN to access the device when using the Android client. Now that I switched to ...
0
votes
0answers
14 views

Installed Comodo SSL certificate not showing in User in Trusted credentials [duplicate]

I am trying to install the SSL certificate for our exchange server. However although it says it is installed it is not showing under the User tab in settings --> personal --> security --> credential ...
1
vote
1answer
72 views

Encrypting Nexus 7 vs. screen lock

I read in this article that a non-encrypted tablet with only screen-lock on can have data read through USB. Is this really true for example for a Nexus 7 tablet? I mean - if I lock the screen you ...
0
votes
1answer
46 views

GSM vulnerabilities

I heard that there are inherent flaws in the GSM protocol that make it possible for someone to impersonate a network operator and do all sorts of nasty things remotely, even if your phone is off. Is ...
-1
votes
1answer
34 views

How can I remotely wipe a stolen phone? [duplicate]

My phone have been stolen and I have many pictures on it, and secret things! How can I trash every thing on it through a Whatsapp message? I have not tired anything yet.
5
votes
2answers
489 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
4
votes
3answers
10k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
5
votes
1answer
114 views

How to prevent tracking or hacking of a used phone

The used phone's IMEI is clean, so it's not stolen. Looks like its seller did a factory-reset before selling it. But how do I make sure that it doesn't have any malware or backdoors, and that its ...
1
vote
0answers
53 views

Asus nexus 7 security settings has clearing credentials greyed out and can't handle device adminstrators

When looking at settings...security, I neither can clear credentials nor change device administrators. Clear credentials is greyed out and there is no option to change the device administration, who ...
0
votes
2answers
69 views

Network security in Android

My question is quite simple. I've been digging around in the subject for quite a while now, but I can't really get a hang of how it works. Scenario: I use Facebook on my phone to chat with some ...
1
vote
2answers
19k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
0
votes
0answers
170 views

Trust Agents in Android L Preview

When browsing to Settings - Security - Trust Agents, it says: No available trust agents. Is this function not implemented yet, or do I have to install an external application? I'm talking about ...
1
vote
1answer
726 views

Google Nexus 7: I can't manage my device administrators

Can someone please help me? I've installed the McAfee protection on my tablet and later changed it to Kaspersky. When trying to deactivate McAfee as device administrator it didn't work. Therefore now ...
1
vote
1answer
4k views

What is YGPS and why does it have every permission that's in the book?

I have a FairPhone One. From time to time I look in the system settings and the battery usage to see what is draining the battery. I've disabled anything I don't use, including a number of builtins ...
0
votes
2answers
145 views

How to encrypt android device without screen lock? [duplicate]

I want to encrypt my phone to protect sensitive information. But I do not want to enter a password every time I pick up my phone. That seriously hampers the usability. Particularly because the ...
29
votes
14answers
5k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
0
votes
1answer
27 views

Seeking alternative to Andoid File Transfer utility

Need usb alternative to Android File Transfer for Mac. Problems: 1. no search capability 2. Cannot report size of files. 3. No route to send problem reports to developer. Reasons for not using ...
0
votes
0answers
36 views

Possibly a trojan named “SuperUser [UID]”?

SuperUser is prompting for access for something named "SuperUser [UID]" Why would the app SuperUser prompt for access for itself? Could it be a trojan with almost the same name as SuperUser?
0
votes
0answers
20 views

Tracking down which app makes HTTP requests [duplicate]

After configuring my Galaxy S4 (Android 4.4.2) phone to use a proxy server for debugging an app, I noticed that other apps on my device were making some suspicious HTTP calls. I would like to track ...