Android Security Settings
If you have an Android device, there are a few practical steps you can take to strengthen its security and protect your data if your phone ever gets lost or stolen.
Please note that the following instructions may vary depending on your Android device manufacturer.
Theft Protection contains several features that are designed to safeguard your device and data in case it is ever stolen.
- Go to Settings, click Security and Privacy, tap More Security Settings, then select Theft Protection.
- Turn on Theft Detection Lock. When this is enabled, your device should be able to detect if someone takes your device and runs away with it. If it does detect this, your phone will lock. Therefore, the thief must know your passcode to be able to access your device.
- Turn on Offline Device Lock. This feature automatically locks your device if it has been disconnected from the internet for a prolonged period of time.
- Click Remote Lock and then turn on Use Remote Lock. This will allow you to remotely lock your device with just a phone number on the website “android.com/lock.”
Live Threat Protection continuously monitors for and defends against online threats such as malicious apps and websites.
- Go to Settings, click Security and Privacy, tap More Security Settings, then select Android safe browsing.
- Turn on Live Threat Protection.
Screen share protection hides sensitive content from remote viewers during screen sharing sessions, such as One Time Passcode (OTP) notifications and entire screens when the user is entering login credentials.
- Go to Settings, click System, and tap Developer options.
- Go to Disable screen share protections and ensure this option is turned off.
Chrome safe browsing warns you about dangerous websites, malware, and phishing attempts.
- Go to the Chrome app, click the three dots (…), tap Settings, then select Privacy and Security.
- Tap Safe Browsing and then choose your preferred protection level.
When Caller ID and spam protection is enabled, incoming and outgoing calls may display details about unknown callers or businesses, along with alerts for suspected spam.
- Go to Settings, click Caller ID and spam.
- Turn on See caller ID and spam. You do also have the option to block spam calls by turning on Filter spam calls.
Google Play Protect scans for harmful applications. Only download apps from established app stores, such as Google Play Store or Samsung Galaxy Store, as they have built-in safeguards that protect your device.
- Go to the Google Play App, click your profile icon, tap Play Protect, then select Settings.
- Turn on Scan apps with Play Protect.
Android System Key Verifier allows the user to verify the public keys of their contact’s public keys to confirm they are communicating with the person they intend to message or call.
To set this up it is recommended to look at the following link to see how to verify contact’s keys from both Google Contacts and Messages, and how to check the verification status of those contact keys, Android System Key Verifier - Android Help.
If you are communicating with someone and you decide to check their contact key’s verification status and it is not verified, you may not be talking to the individual you intended to contact. Further information on this is available at the link above.
Note that you will need to download the Android System Key Verifier app from the App store.
Lock Network and Security means you unlock your phone to be able to shut down your device or disconnect it from Wi-Fi and mobile data or to turn on airplane mode. This can hinder thieves from being able to disable the tracking feature on your device.
- Go to Settings, click Lock Screen and AOD, tap Secure Lock Settings.
- Enter your device passcode.
- Turn on Lock Network and Security.
Your International Mobile Equipment Identity (IMEI) number is a unique identifier for a mobile phone, which can help you track your phone if it is lost or stolen. If you file a report for your stolen device to local authorities, they will likely ask for the IMEI and serial number.
- Dial *#06# and then both numbers should be displayed.
Two-Factor Authentication adds the requirement for a second identification method when signing into your device’s account. To set it up you must add trusted devices and/or phone numbers which will be used to verify your identity when signing in.
Key point: Have a second trusted device that can receive two factor authentication codes so you can still access your data from another device in case your primary device is lost/stolen.
- Go to Gmail, sign in to your account if required, click your profile icon, then tap Manage your Google Account.
- Click the Security tab, tap 2-Step Verification and then follow the onscreen instructions.
With cameras active in most locations and shoulder surfers wandering around (people that watch you enter passwords) the last thing you want is for someone to be able to see your passwords. Turning this off means passwords will not be displayed when you key them.
- Go to Settings, click Security and Privacy, then tap Other Security Settings.
- Turn off Make Passwords Visible.
You can change your accounts password to make it stronger or change it if it has been compromised.
- Go to Settings, click Google, tap “Your name,” then select Manage your Google Account.
- Go to the Security tab, tap Password, complete the security check that appears on your screen.
- Then enter your new password and click change password.
It is important to keep your apps updated with the latest security patches as these updates often include fixes for vulnerabilities that criminals can exploit.
- Go to Google Play Store, tap your profile icon, click Manage apps & device and then press Updates available.
- Click Update all, this may take a bit of time to complete.
It is important to keep your device updated with the latest security patches as these updates often include fixes for vulnerabilities that criminals can exploit.
- Go to Settings, click Software Update, press Download and install.
- Click Install now.
Some apps have the capability to install other applications without your permission. You can prevent this by turning the option off in the settings app.
- Go to Settings, click Security and Privacy, tap Install unknown apps.
- Turn off the option for each app.
Some apps also have the capability to remotely lock or reset your phone or even disable your camera and other features. Again, you can disable this by following the steps below.
- Go to Settings, click Security and Privacy, tap Other security settings, then click Device admin apps.
- Turn off all apps.
There are settings you can alter so that less of your data is sent to corporate companies such as your device manufacturer. They use this data to learn about your interests and preferences, which is used to display more relevant search results as you use your device and applications.
To see what data is being sent to your device manufacturer following the steps below where you can also stop this data from being shared.
- Go to Settings, click Security and Privacy, tap Privacy, then click Other privacy settings.
- Tap Customisation Service, then click Data management and you will see what data you are sharing.
If you want to turn off this data sharing completely, follow these steps:
- Go to Settings, click Security and Privacy, tap Privacy, then click Other privacy settings.
- Tap Customisation Service, then click Stop customising all devices.
Google uses the data you share with them to personalise your experiences, so the search results, recommendations and advertisements are tailored to you. You have the option to stop Google from saving and storing your data.
- Go to Settings, click Security and Privacy, tap Privacy, then click Other privacy settings.
- Tap Activity controls (this will take you to your Google account), then go to the Web & App Activity section.
- Review the Sub settings and unselect the data you do not want shared.
If you leave any options on, it is recommended you turn on the auto-delete option. This will automatically delete data once it has been stored for that length of time.
- In the Web & App Activity section, click Deleting activity older than 3 months.
- Then select a length of time (3 months is recommended), then click Next to save.
An advertising ID allows developers and advertisers to track your activity to provide you with advertisements that are tailored to your preferences. You can delete this by following these steps:
- Go to Settings, click Security and Privacy, tap Privacy, then click Other privacy settings.
- Tap Ads, then click Delete advertising apps.
Some applications may have access to features on your device such as camera access, contacts, location, microphone, and even your clipboard. You can change the permissions of each app so that they do not have access to these features or they have limited access.
- Go to Settings, click Security and Privacy, tap Privacy, then click Permission manager.
- Then select an option for each app’s access. It is recommended you select Never if the app does not need to use that feature. For other apps try to select Ask every time, to limit their access.
Selecting these options means that the apps cannot access these features when you are not expecting/wanting them to do so.
Your clipboard is a temporary storage area that holds text, images, or other data you have copied or cut. This is what allows you to paste the data into other locations. Some apps access your clipboard, to know when this happens turn on the following setting:
- Go to Settings, click Security and Privacy, tap Privacy.
- Turn on Alert when clipboard is accessed.
This does not stop apps from accessing your clipboard. So, you must be careful when copying passwords and personal details across apps.
You can clear your clipboard:
- Open the on-screen keyboard (in any app), click the clipboard icon (this can be seen either within the keyboard’s menu or by tapping the three dots or arrow to access the menu)
- This will show your clipboard, tap select all, then click delete.
Hiding apps can play a role in protecting your information if your device is lost or stolen. By concealing sensitive applications such as banking, email and authentication apps, you reduce their visibility to unauthorized users and make it more difficult to identify potential targets.
- Go to Settings
- Go to Home Screen Settings
- Navigate to Hide Apps on Home screen and App screens
- Select the apps you want to hide on your home screen. They will no longer be visible on your homes screen.
To unhide any apps, go to the same settings screen and remove them from the hidden apps section.
A SIM lock on an android or Samsung device is a restriction set by a mobile network provider that limits the device to only work with SIM cards from that specific carrier. This means you cannot use a SIM from another network until the phone is unlocked.
Android Devices:
- Open settings
- Tap Security or Privacy (This may appear as Lock Screen & Security)
- Select Advanced settings or other security settings
- Tap SIM card lock or Set up SIM card lock
- Toggle Lock SIM card to On
- Enter the SIM PIN provided by your network
- Tap OK to confirm
Samsung Devices:
- Open Settings
- Tap Biometrics and security
- Scroll down and select other security settings
- Tap Set up SIM card Lock
- Toggle Lock SIM card to On
- Enter the SIM PIN provided by your network
- Tap OK to confirm
If you haven’t set one before, use the default PIN provided by your network. If you’re unsure of the default PIN, do not guess it as it can permanently lock your SIM card, and instead contact your provider directly.
If you think your device has been infected with malware, you should try to locate and remove it from your device.
- Check Google Play Protect is turned on. Open the Google Play Store, tap your profile icon, select Play Protect and then tap Scan.
- Remove untrusted apps.
- Check your File app for anything suspicious. If you see something you do not recognise, delete it.
- If you think your device still has malware on it, you may want to factory reset your device. Do this by opening Settings, click System, tap Reset options and select Erase all data (factory reset), then follow the on-screen instructions.
Contact Arbuthnot Latham immediately on 020 7012 2500 if your device has been lost/stolen. With this information we can remove your cards from digital wallets, stop OTPs from being sent to that device, and block thieves from being able to access your banking applications.
Once you have called the bank and made them aware that your device has been lost/stolen. Follow the next steps to secure your device.
- Go to Find your phone, then sign in with the same Google ID that is signed in on your device to remotely track your device.
- Once you are logged in, three options will appear:
- Play sound – this is to locate your lost phone when you are near its location.
- Secure device – you may want to activate this if your device has been stolen, so thieves cannot steal your data, but you can still track it.
- Erase device – if your device has been stolen and you know your data is backed up, you may want to select this option which deletes all your data from the device.
Note that some android manufacturers have their own remote find my phone websites, such as Samsung. So, it is recommended you test the remote find my phone capability of your device in case it is ever lost/stolen. Make sure you sign in with the same account that is signed in on your device.
If you have 2-Factor authentication setup, make sure you download and save your backup codes. These codes can be used to sign into your account without your trusted device. So, ensure these codes are kept somewhere safe but accessible, in case your device is lost or stolen.
- Go to Gmail, sign into your account if it is required, click your profile icon.
- Tap Manage your Google Account, click the Security tab, then click 2-Step Verification.
- Tap Backup Codes, click Get backup codes, then select Download codes.
Complete regular backups in case your phone is either lost, stolen, or broken. Backups store your data in the Cloud. This allows you to access your data from other devices and restore it onto new devices when you find a replacement.
You can backup specific data to different locations, such as:
- Photos and videos can be backed up to cloud services, like Google Photos.
- Contacts and WhatsApp messages can be saved to your Google account.
- Other data (including Notes, Apps, phone settings, call logs, and text messages) can be backed up to your device manufacturers cloud.
If you use a Google account on your android phone, it is important you add a recovery phone and email to your account. This will allow you to recover your account without using your password. So, if you forget your password or someone else is using your account, you will still be able to gain back access.
- Open Gmail, sign into your account (if required), click your profile icon, then tap Manage your Google Account.
Click the Security tab, go to the Ways we can verify it’s you section, then add a Recovery phone and a Recovery email by following the onscreen instructions.
Need help?
Get direct support from Google or your device manufacturer:
- Most, if not all, android device manufacturers will have support lines to help you with any queries you have.
You can get personalised recommendations for your Google account to improve its security by following the link https://myaccount.google.com/security-checkup.
You may also want to look into Google’s Advanced Protection Program, which is designed to help you against targeted online attack.
DISCLAIMER
The information and advice contained in this guidance is for general information purposes only. Whilst we have made every effort to ensure the contents of this guidance are reliable and current, we are not responsible for its completeness or accuracy, or for the results obtained from the use of the information it contains.