Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
12 votes
3 answers
10k views

How can I make my phone/tablet ring remotely without a SIM card?

I appear to have lost my Streak somewhere in my apartment, and I can't call it since I don't have a SIM card in it. I've remotely installed Plan B just because, but unfortunately the GPS coordinates ...
Matthew Read's user avatar
  • 50.5k
53 votes
4 answers
17k views

Just how secure is a pattern lock?

I recently had a phone stolen. It's been replaced, I've changed my passwords, the phone company has shut down connectivity for the stolen one... I think I'm pretty much as safe as I can be. However, ...
Questioner's user avatar
  • 3,669
6 votes
1 answer
5k views

Why do App Locker apps need so many permissions? Am i safe?

I've been trying to password protect an app, and it seems that the permissions vary from app to app for App Lockers. Why do so many of them require full phone access? Is there any danger if i use a ...
v15's user avatar
  • 557
0 votes
1 answer
2k views

I forgot my lock pattern, how do I reset it? [duplicate]

Possible Duplicate: Recovering from forgotten lock pattern I have a Toshiba Thrive Android Table and I forgot what I used as my pattern lock. How do I reset it? Someone please help!
VANESSA's user avatar
6 votes
2 answers
5k views

OpenVPN with Android 2.3.x - security concerns

I need to use my Android 2.3.x phone to access an OpenVPN server. I have CM 7 with built in support for OpenVPN and tun. My main concern is that I don't know where to put the keys in. If my phone gets ...
sostacked's user avatar
  • 171
27 votes
5 answers
16k views

My phone was just stolen an hour or so ago. Are there any options for tracking?

I realize this is a long shot, but my phone was lost or stolen a few hours ago. At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my bad....
Questioner's user avatar
  • 3,669
5 votes
1 answer
9k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...
lxgr's user avatar
  • 538
3 votes
0 answers
216 views

A data forensic tools for android [closed]

I have recently taken interest in digital forensics. What is the best tool, or set of tools to obtain and analyze images of android phones?
Tyler's user avatar
  • 433
4 votes
2 answers
2k views

How can I detect Malware and/or viruses?

I'm buying a used Droid phone (Verizon) that has been rooted. Is there anyway to scan it for viruses (and more importantly) malware? Or maybe even a firewall? (I may be being overcautious). Some ...
Clay Nichols's user avatar
  • 1,329
0 votes
5 answers
6k views

Locking SDHC Memory card on Samsung Galaxy 2

I have stored an important document on the SDHC card on my Samsung Galaxy 2 phone (so that I can edit it on the go). I don't want others to access this file or document without my permission. I know ...
Adhesh Josh's user avatar
6 votes
1 answer
879 views

Secure keyboard application from android market

Is it safe to install a keyboard application from android market that asks full internet access permission? Will it not lead to certain security risks? There are several free and paid keyboards that ...
Chesnokov Yuriy's user avatar
4 votes
5 answers
3k views

Erasing SD Card contents and personal data

I have an SD card in my Droid Global or Droid X, not exactly sure which model. I go to the files and click on the SD card instead of shred files and delete all of its contents. I then go to Privacy ...
savannah's user avatar
7 votes
3 answers
2k views

How can I securely store my private key I use for logging into my home PC

I've been told that the SD card is a terrible place to store secure data because any app can read it. How else can my phone store my private key I use to log into my home PC ssh server?
Dan's user avatar
  • 443
8 votes
2 answers
358 views

Is there a service that rates app security/permissions?

Is there a service/company/app that vets Android apps and reports on their "trustworthiness"? I recently moved from Blackberry to a Galaxy S2 which does not have an LED indicator light. I searched ...
Farray's user avatar
  • 293
20 votes
6 answers
6k views

Is it reasonably safe to use PIN code for encryption?

On the Android 4.0 (Samsung Galaxy Nexus) there is a posibilty to encrypt the phone. I found this about the encryption on Android 3.0, is the same algorithms used in Android 4? http://source.android....
Christopher Käck's user avatar
23 votes
8 answers
12k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...
Rozwel's user avatar
  • 425
15 votes
1 answer
7k views

How do I protect my phone from malicious apps once it is rooted?

I rooted my phone. Now if I use a Terminal Emulator such as Android Terminal Emulator, I noticed that I can can easily obtain root access without a password: $ id uid=10059(app_59) gid=10059(app_59) ...
Stefan Lasiewski's user avatar
5 votes
6 answers
5k views

How do I lock my HTC whenever I want?

I have a HTC Wildfire S and set up the screen lock pattern for it. This triggers after some time but sometimes I want to lock it myself, for example if I leave the office and let my phone on the desk. ...
user98217340284's user avatar
4 votes
2 answers
1k views

My HTC Desire HD has been stolen. What data can still be accessed by the thief?

I have contacted the network and had the phone barred, I had applied a screen lock. I am concerned however if the thief can still access all my numbers, texts, saved passwords and most importantly ...
Donna's user avatar
  • 41
2 votes
1 answer
11k views

How to force Gmail/Android to request password every time for google account [duplicate]

Possible Duplicate: Logout from Gmail on my device I have a Samsung Galaxy Ace running Android 2.3.3. Is it possible to force Gmail or any google related apps to request my password everytime I ...
Ravs's user avatar
  • 21
5 votes
2 answers
1k views

Encryption of offline mail, calendar, contacts data on Android

I'm very new to Android and I wonder what I can do in terms of encryption. As I read it seems that only Android >= 2.3.3 supports encryption but my new device will be running Android 2.3.1. So I ...
meinzlein's user avatar
7 votes
2 answers
11k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
Wabbitseason's user avatar
3 votes
1 answer
1k views

How to prevent data extraction from rooted phone via adb?

I've a question regarding security in a rooted device. Being superuser means that you can access the /data/data directory, and that's a lot of personal data (I think it is almost all the data there ...
Mister Smith's user avatar
7 votes
3 answers
354 views

Is it possible to track what information on your phone an app is uploading?

If you are concerned about what information an app is sending about you (your privacy concerns) is there any way of tracking this? Can you see if an app is sending photos on your phone? Can you see if ...
Vass's user avatar
  • 351
10 votes
4 answers
8k views

How to delete a specific file in Android so that it can't be recovered?

From my experience a file deleted from a computer filesystem can often be recovered unless it is overwritten with a special program (that's usually called "shredding"). Is an Android-based HTC ...
sharptooth's user avatar
  • 1,198
4 votes
1 answer
220 views

What are potential problems/violations that malware apps can do?

There are some apps that I am considering to download which have many permission requirements and have few comments from other past users. The number of downloads are relatively low so I am ...
Vass's user avatar
  • 351
0 votes
1 answer
2k views

How To Protect Mobile Internet Access?

I want to know how to protect mobile data connection function in Android. I don't want somebody or me accidentally switching it on. I need something like Smart AppLock but to protect basic phone ...
Boris_yo's user avatar
  • 697
10 votes
1 answer
8k views

How does android transfer with bump apps work?

I've come across several apps which allows the user to transfer data (like files, photos, contacts) when they "bump" their phones. An example is Bump, which use the the bump to transfer files and add ...
Fitri's user avatar
  • 2,329
4 votes
1 answer
349 views

Can an Android device be locked down by an administrator?

I would like to know if it is possible to use android devices in a work environment with restrictions on the phones usage. These phones would be given to members in the field to log data, and only ...
William's user avatar
  • 41
10 votes
2 answers
17k views

Can Android phones be set to automatically wipe all data after a certain amount of failed logins without an app?

A new policy at my work is being drafted regarding email access on phones. A requirement will be that the phone must automatically have all data erased after a certain amount of failed login attempts. ...
John Straka's user avatar
1 vote
2 answers
1k views

Is my Exchange email encrypted on my device?

If I setup an email synchronization with our Exchange server, is the mail I store on my phone encrypted or readible if someone finds/steals my phone? I have enabled the unlock password (although it's ...
GvS's user avatar
  • 295
14 votes
5 answers
101k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
Piskvor left the building's user avatar
2 votes
1 answer
899 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
galets's user avatar
  • 511
8 votes
1 answer
213 views

Locking down an Android device?

I'm interested in locking down an Android, so the user can only access a particular app (bonus points: only allow them to access the browser app, and only allow one website from within that). How ...
askvictor's user avatar
  • 450
3 votes
3 answers
5k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? Also,...
Clara's user avatar
  • 39
23 votes
3 answers
22k views

Force VPN usage?

On an android phone, stock or modded rom, is it possible to force the use of VPN? E.g. only allow traffic tunneled by VPN, don't allow traffic without using VPN to make sure that no unencrypted ...
stefan.at.kotlin's user avatar
-2 votes
2 answers
153 views

How can I turn off Wi-Fi in Android?

When my wireless is turned off, and I get near an open wireless network, it automatically connects to it. (Why?) How can I completely turn off the Wi-Fi so that my phone will not do such insecure ...
LanceBaynes's user avatar
  • 1,341
11 votes
2 answers
963 views

Which disk encryption standard is used in Honeycomb?

Does anyone posses an official or un-official information on which encryption standard is used in Honeycomb "encrypt tablet" option? Is there an information on any hacks or backdoors, placed for law ...
galets's user avatar
  • 511
2 votes
1 answer
265 views

Is it possible to use Prey on a non-phone device?

This answer to a question asked earlier today reminded me that I had been wanting to check out Prey because I had heard some good things about it. I ended up installing it and creating an account, but ...
eldarerathis's user avatar
  • 36.7k
46 votes
10 answers
23k views

Is there a way to block access to or wipe my Google data for a lost/stolen phone

If my phone was ever lost or stolen, my only real concern is data and apps associated with my Google account, such as my Gmail, the ability to purchase apps from the Market, and maybe Picasa albums. ...
Chance's user avatar
  • 1,912
5 votes
3 answers
1k views

Is there an Android app that scans a device for vulnerability issues?

Is there an application that scan the phone or the phone image searching for vulnerability issues? In the internet there are several tools that make Network scanning, but I found nothing specific for ...
Luander's user avatar
  • 207
6 votes
1 answer
310 views

Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?

As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
Fitri's user avatar
  • 2,329
1 vote
1 answer
144 views

Is there an Android known issues database?

Does anyone know if there is a Known Issues Database for Android, or some tool that one could search for known issues based on the version of some parts of the code such as the kernel.
Luander's user avatar
  • 207
5 votes
2 answers
423 views

In general, do Android apps use encrypted connections? If so, is public WiFi safer?

I know that connecting to public WiFi carries risks. I know that much of the risk has to do with sending data over a public connection, allowing it to be intercepted. So, my question is, do most ...
Chance's user avatar
  • 1,912
10 votes
2 answers
363 views

Does the official Google Plus Android client use HTTPS for automatic photo upload?

I'm at a conference using their (open) wifi. Normally I don't bother to tunnel my connection because I figure anything I care about (email, banking, etc.) goes over SSL/HTTPS anyway. It occurred to ...
James B's user avatar
  • 597
6 votes
1 answer
270 views

How do Android devices receive security updates?

I'm new to Android and I'm thinking about buying an entry-level Android device. Yesterday I read that Android passwords are stored in plain text. That got me to thinking... how do Android devices get ...
Pieter's user avatar
  • 365
3 votes
2 answers
862 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
itsadok's user avatar
  • 133
6 votes
3 answers
4k views

Are Tmobile using bogus DoD IP addresses (bogons)?

I recently started picking up some weird entries in my firewall log: kernel: arplookup 26.XXX.XXX.XXX failed: host is not on local network There are at least at dozen entries, all to different IP's ...
user avatar
10 votes
3 answers
22k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
Rafael S. Calsaverini's user avatar
4 votes
1 answer
158 views

different way of securing applications

In my phone instead of unlocking screen by providing "symbol", I'd like the phone to unlock to most of my applications without the "symbol". But for selected important applications (eg. gmail) I'd ...
Ancymon's user avatar
  • 141