Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
9
votes
4answers
5k views

How to protect my Wi-Fi password from being displayed by Android phones when sharing it with QR code?

I would like to know if there is any workaround to protect or hide my TP-LINK Wi-Fi router password from being displayed on phones using Xiaomi (Redmi) phones. If we go to Wi-Fi in a Redmi phone and ...
-2
votes
0answers
19 views

Where is fingerprint data stored on Pie? [duplicate]

Where is fingerprint data stored on Android Pie? I'm sure it is not in any directory that is encrypted using the credential encryption key.
1
vote
1answer
40 views

How do I connect to 802.1x EAP Wi-Fi network from an Android 10 device?

My Wi-Fi uses 802.1x EAP with TLS. It works well with the old Android devices, but an Android 10 device pretends that it's trying to connect, and a few seconds later marks the connection as disabled. ...
1
vote
1answer
37 views

How to secure phone for repair shop?

I've been an android user for many years and so far I've been lucky enough not to need to have a phone repaired by a shop, so I'd never considered this problem until recently. I had to give my Galaxy ...
0
votes
0answers
54 views

Can we do something in Factory reset protection so the phone will be locked for ever?

I am reading this link about android Factory Reset Protection (FRP). Somewhere it says: Waiting a full day (or three) really sucks, but it's better than not having any access to your account and ...
1
vote
0answers
57 views

What is a “synthetic password” and how is it used by Android?

On a first-generation Pixel that is running Pie, in locksettings.db there is a field named sp-handle that contains a 64-bit value. sp is an abbreviation for "synthetic password". Under /data/system_de/...
0
votes
0answers
40 views

Seeting up secure (Android) phone 2019

I am trying to build a security phone from my old Samsung A7. Although I do observe relevant threads, I want to get the latest update in 2019. These requirements are in my thoughts but I am welcomed ...
2
votes
1answer
110 views

SELinux always set to permissive, how to set enforcing permanently?

I flash a custom ROM to my HTC B2UL. The ROM, by default, has the SELinux policy set to Permissive instead of Enforcing. I can use adb shell setenforce 1 to make SElinux enforcing. But after reboot, ...
0
votes
0answers
46 views

CamScanner Malware: Do I need to uninstall older version?

Recently a malware was found in the popular android app CamScanner. The app is now removed from Google Play store. The company has also acknowledged the existence of the malware in an official ...
0
votes
0answers
35 views

AFWall+ not blocking consistently

I'm running a rooted pixel 3 (Magisk) with the "liboemcrypt disabler" module for running Netflix, Magisk Hide and the dg.db edit to disable attestation for running Google Pay. The firewall will work ...
0
votes
0answers
21 views

How does an app (e.g. Whatsapp) automatically detect when the phone receives a 2FA SMS verification code without being granted SMS read permissions? [duplicate]

When installing some apps (for example Whatsapp) the user is required to receive a verification code on the phone via SMS. I have noticed that some apps automatically verify this code as soon as the ...
0
votes
1answer
45 views

My android phone is often getting affected with virus

My problem : Hello friends. I use Asus zenfone go T500 android phone. My problem is, my phone often gets affected by some kind of virus which sometimes installs some chinese apps without my knowledge ...
1
vote
0answers
66 views

Android : how to remove the downloaded android update

I have a securities concern. I installed a VPN software on my android and just after (the next day) android asks me do install an update (that is already downloaded via the VPN). I don't fully trust ...
1
vote
0answers
44 views

Set off alarm in Walgreens and CVS

When I walked into two different drug stores, I set off a store alarm. The cashier at Walgreens said that it could be my phone setting off the store alarm when I walk in the door. Is that possible ...
0
votes
1answer
33 views

Why can't I change my password in system settings? Nexus 6p Resurrection Remix Pie

After entering the wrong password too many times in VPN settings, I can't enter my password in settings. Whenever I do, I get sent back to the previous page. I can't even change my password!
0
votes
0answers
59 views

How can i use orbot(tor) with adblocker same time without root?

I want to get more internet privacy on my android phone. Im using tor to protect my traffic from MITM attacks by ISP,Goverment... But Orbot have no adblocking feature. Advertisers are tracking our ...
0
votes
1answer
40 views

Always require PIN to unlock device

Is there any way to always require the user to enter the PIN (instead of fingerprint) to unlock the device? It seems that as soon as you add a fingerprint to the phone, now it no longer requires the ...
0
votes
0answers
24 views

I found apps that I have not installed. How can I investigate this?

There are 6 apps on my phone that I haven't explicitly or implicitly installed. Most likely they were installed today, as they happened to get on the first screen/page, so I immediately noticed them. ...
1
vote
1answer
100 views

Is There A Mobile Hotspot App With A Firewall to Block Incoming Connections?

I've been using the Android mobile hotspot to get an Internet connection while traveling. The stock hotspot is fine for my laptop which is firewalled, but there are a few devices (smart TV, game ...
0
votes
1answer
79 views

How do I get a hacker out of my phone?

The other day my phone number was added to my Google account, data was turned on and off. Different things have been happening. I have a LG V35 and it has an LG VPN section and when I check the log. ...
0
votes
1answer
78 views

How do I prevent my phone from restarting after a System Update?

Phone: Mobicel TRENDY_LITE Android: 8.1.0 For about two days now, I have been receiving many Security and System Updates. Every time an update is ready, my phone restarts without permission. After ...
0
votes
0answers
16 views

how to disable pattern lock to open apps

i am having to draw a pattern to open my apps. And it's not just Google apps either. I didn't set this (to my knowledge) and want to disable it.
0
votes
0answers
39 views

PIN to unlock phone, fingerprint only for specific apps

Android 8.0, Moto G6 I set up a fingerprint yesterday to use to unlock specific apps in lieu of a PIN. I still want to use a PIN to unlock my phone and only use the print for specific apps (to unlock ...
0
votes
1answer
85 views

Remove the lock for the app

I installed one particular app two months ago. When I opened it the first time, a popup opened with a suggestion to enable the screen lock pin. And I enabled the screen lock. From that time whenever I ...
0
votes
2answers
64 views

Logging off viber account on my stolen phone

I lost my phone last Friday, May 31. I was able to get already a replacement SIM card for me to use the same no. again for my new phone now. My Facebook was already hacked yesterday since my FB app in ...
0
votes
0answers
36 views

Preventing Google Account logout

On an iPhone, I can effectively prevent somebody from signing out of my iCloud account using the parental controls (disable Account Changes, and then require a pin to re-enable). Is there an ...
1
vote
0answers
34 views

Can not select secure screen lock option on Samsung Galaxy s8+

I am trying to set my screen lock to pattern/pin/password but it reverts back to a non-secure option (swipe/none). I have tried: Clearing cache Clearing credentials Removing Nova-launcher I'm all ...
0
votes
1answer
59 views

Cannot add “Amazfit Bip” watch as a “trusted device”

I've got a ZTE Axon 7 phone, and it generally works fine. I also have an Amazfit "Bip" watch, and I've successfully paired it with the phone via Bluetooth. However, when I try to add the watch as a "...
0
votes
0answers
14 views

Missing authentication options on a secondary user account

I created a secondary user on a Huawei P10 running Android 9. I notice that this secondary user misses some authentication features in the Security/Confidentiality settings. Although fingerprints ...
1
vote
0answers
77 views

Are Android PIN and Password being stored in the same file?

I'm curious about where the PIN is being stored in Android OS as I could only find out that the password is stored in a file named password.key in /data/systemdirectory. However, I could not find the ...
0
votes
0answers
448 views

App Installation “blocked by your IT admin”? (Galaxy Note 8)

I use YMusic to listen to music/audio books, which is an outsider app from xda-developers. When I tried to install an update, I got the message below, as if YouTube is preventing me from installing ...
0
votes
0answers
11 views

How do you stop Android/Chrome from saving usernames?

I did see an article about telling Chrome not to save passwords, but this question is specifically about usernames that get saved in auto-complete.
0
votes
0answers
58 views

In Android 7.0 Nougat, which permission gives an app your phone number?

In Android 7.0 Nougat, which permission gives an app your phone number? When I say "which permission", I mean when installing apps, the Google Play store will inform the user of certain permissions. ...
4
votes
1answer
119 views

Decrypting microSD card on another Android device or desktop computer

I'm looking for a solution that would allow to encrypt external microSD card with the following conditions: external microSD card is not merged with the internal storage; encrypted external microSD ...
0
votes
0answers
35 views

time/date on usage stats

my usage stats on my android stamped everything Dec31, 1969. why? what the hell?
0
votes
0answers
43 views

Error when using MobSF

When I run MobSF, I get a lot of DEBUGs, as shown in the screenshot below. I tried to run both with the indication of the port (8000), and without specifying. I will be grateful for the help.
1
vote
0answers
68 views

Can I secure my android phone from being hacked while hosting a website?

I have been able to host a website of my own using "apache http server" app from my android adjoining with "termux" app using serveo as ssh tunneling. Can I make my phone more secure, so that it can ...
1
vote
1answer
107 views

How to set password request for booting the smartphone?

How can I set the phone so it requests to unlock the screen before starting up? Earlier I had to unlock the phone so it starts up but now it boots without unlocking (and I didn't change anything in ...
1
vote
2answers
290 views

WhatsApp Messenger zero-day exploit: How to upgrade?

It turns out that WhatsApp Messenger is affected by an exploitable buffer overflow vulnerability, which can be used to take over the phone with "zero clicks", by placing a call using specially crafted ...
0
votes
1answer
62 views

End-to-End Encryption IMAP client

I recently discovered that Outlook for Android uses an intermediate server for IMAP connections, meaning that: mail is accessed in plain-text by a third-party credentials are known in plain-text by a ...
0
votes
1answer
101 views

How to apply the latest security patches on Nokia 3.1?

I've a Nokia 3.1 with build number 00WW_2_680_SP02. When I run Check for updates, I have the message: Your system is up to date Android version: 8.1.0 Security patch level 1: 1 February ...
0
votes
1answer
57 views

How do I set up erase and secure?

My phone was stolen so I tried to erase from Samsung Device Manager but it just sends an erase instruction which I don't know whether the person who turns my phone on will be able to just stop from ...
7
votes
1answer
323 views

Attempting to brute force Android security pattern through TWRP via adb

Yesterday I somehow forgot the Android security pattern on my phone. Due to muscle memory I sort of know what it was, but can't figure out the true pattern. Therefore I'm attempting to brute force it ...
0
votes
0answers
212 views

How to create Android sepolicy based on the denial “execute_no_trans”?

I am trying to execute my script /vendor/bin/init.inmod.sh using below method: Script init.inmod.sh: #!/shebang??? /vendor/bin/test_disp hdcp disable In vendor specific .rc file: on ??? start ...
0
votes
1answer
72 views

Sensitive information in the About screen [closed]

Which of the following information from the About screen (Settings -> System -> About) is considered sensitive and shouldn't be shared publicly? IMEI IP address Wi-Fi MAC address Bluetooth address ...
0
votes
0answers
65 views

Gaining higher privileges

When an application requests access to some features of the phone, for example to read SMS storage, it always asks the user for permission for the second time. Is there a way to bypass/disable this ...
0
votes
0answers
78 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
0
votes
0answers
63 views

How to disable android on localhost folder

When I connect my android phone to wifi, using a desktop PC connected to the same wifi I can see a list of folder that belongs to my android phone called android on localhost (as shown in the ...
1
vote
0answers
161 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
1
vote
1answer
217 views

“Device Admin” apps are asking for permission to erase my data after failed login attempts! How can I confirm?

I was about to install the Outlook app on my phone, when it asked me to activate it as a device admin. (See image below): I'm sure few people read the whole warning. One part greatly concerned me: ...