Securing your Android phone or Android tablet is more involved than adding a PIN lock (although you should certainly do that).
Here we run through 14 ways you can keep Android secure, from dealing with app permissions to locking down apps, dealing with Android viruses and tracking down a stolen phone.
- Screen lock
Setting up a screen lock is the simplest way to protect Android when your phone or tablet falls into the wrong hands. These days you can set a PIN lock, pattern lock, password lock and, if your device supports it, a ﬁngerprint or eye scanner lock. It’s so easy to do you really have no excuses. Head to Settings > Security > Screen lock to get started.
- Lock individual apps & media
You can add an extra layer of protection to your apps by locking down those you really wouldn’t want to get into the wrong hands with an app such as App Lock. Not only does this let you toggle on and oﬀ a PIN lock for individual apps such as Facebook and Gmail, but it has a safe fault for hiding photos and video that shouldn’t be seen by prying eyes.
- Keep the OS and apps up to date
Android‑ and app updates don’t just bring new features, but also bug ﬁxes and patches to safety vulnerabilities. You should safeguard your apps are set to auto‑update over Wi‑Fi in Google Play’s Settings > General > Auto‑update apps menu, and make sure you have applied any new operating system updates in Settings > About Phone > System updates.
- Don’t download apps outside Google Play
By default your Android phone or tablet won’t let you side load apps from wherever other than the Google Play store, but it’s easy to get around this in Settings > Security > Device Administration > Unknown sources. Google has no control over apps outside its app store, so only those who really know what they’re doing should even think about side loading, and doing so only from trusted sources.
- Manage app permissions
A beneﬁt of downloading apps only from Google Play is that it will tell you which permissions an app requires before you install it. There is often a good aim for apps needing access to seemingly unrelated facilities on your phone, such as games that want to view your contacts (to allow you to compete against your friends) and messaging apps that want to access your camera (to allow you to send picture‑ and video messages). However, if you can think of no reason for an app needing a particular authorization, don’t install it.
New in Android Marshmallow is the ability to manage app permissions and control what an app can and can’t do on your phone even after you’ve installed it. Should an app need a permission you haven’t granted, it will prompt you ask for permission before it does its thing. You’ll ﬁnd App Permissions in Settings > Apps > App Permissions.
- Set up user accounts
Since Android Lollipop we’ve been able to set up multiple user accounts on tablets, and more recently on phones. If you are going to be sharing your device with another family member, a colleague or a friend, you can give them access to only the parts of your Android that you are willing to let them see. Set up user accounts in Settings > Users > Add User.
- Be careful what information you share
We’ve often complained that people are sharing too much information on social media, such as publicizing the fact they are going abroad for a week on Facebook and leaving their home vulnerable to burglars (don’t do that), but with Android you may ﬁnd you’re sharing too much information with yourself. Android uses the Chrome browser, which you may well also be using on your laptop or desktop PC. The ability to sync your bookmarks, passwords and more through a Google account (which is also tied and automatically logged into your email‑ and other Google accounts) is an awesome timesaver, but it could become an issue should you lose your phone or tablet or it gets into the wrong hands. All your logins, passwords and sensitive data within your emails will be available to whoever ﬁnds your Android device and knows where to look for that stuﬀ.
You can control what data (particularly passwords) is stored by Chrome by launching the browser, tapping on the three‑dot icon at the top right of the window, and choosing Settings > Basics > Save passwords. Also open the Settings menu in Chrome, tap on your account, and then choose what data is synched.
Don’t forget Chrome’s Incognito mode, which allows you to browse the web in privacy and won’t track you. Open a new Incognito tab from Chrome’s Settings menu.
- Set up remote tracking and wiping
Android Device Manager is an excellent tool for tracking down and, if necessary, wiping a lost or stolen Android phone or tablet. It’s a free app for your phone or tablet from Google Play, but can also be accessed on any web browser in which you are signed into a Google account.
- Consider device insurance
Following on from the last tip, should your phone or tablet go walkies you don’t want to ﬁnd yourself out of pocket. Given that some devices can cost over £600, it’s worth considering device insurance if losing your phone is something you tend to be rather good at. Insurance 2Go oﬀers smartphone insurance from £5.99 per month.
- Back up Android
It’s not just the fact that our data might get into the wrong hands when our device is lost or stolen that it worrying ‑ it’s also the fact it will no longer be in our hands. Backing up Android is vital, and in doing so you can tie everything to your Google account rather than a piece of hardware that could break at any point. Backing up Android also means things such as your photos and videos are accessible through any web browser signed into your Google account, and that next time you buy a new phone you won’t have to manually download and install all your favorite apps.
- Dealing with Android viruses and malware
Android viruses are few and far between, and you’re more likely to ﬁnd yourself in trouble by clicking on a dodgy link in Gmail or a text message and giving away too much personal information than you are to download a dodgy app. But it is possible. Some people like to install an antivirus app such as Lookout, Avast or AVG Free, but we’re not yet at the point where that is strictly necessary and usually all you need do to avoid Android viruses is to stick to downloading apps only from Google Play.
- Use secure Wi-Fi
Smartphones and tablets are mobile devices, which mean we are as likely to use them in a cafe or pub as we are our own homes. Provided free Wi‑Fi is available, of course. Just don’t fall into the trap of jumping on to an unsecured wireless network just so you can take advantage of a free internet connection when out and about – whoever is providing that ‘free’ internet connection may be taking a great deal more from you in return.
- Encrypt Android
Those wanting to secure their Android device will more than likely have spotted the encryption option in Settings > Security > Encryption. This scrambles all the data on the phone – apps, media and more – until you put in the decryption password, which you will need to do every time you turn it on. Encrypting and decrypting your data takes time, and for the majority of people it’s an unnecessary step that will simply slow things down. However, if your device contains extra‑secure information, it’s a possibility you might like to consider.
- Use a secure messaging app
Where do your text messages go once they’ve left your phone, and can others snoop on them? That all depends on the service you are using.
As of the beginning of April, popular instant messaging service WhatsApp now oﬀers end‑to‑end encryption. Another secure messaging app often cited is Signal Private Messenger, which allows you to chat freely with your friends without its server being able to access your communication or data.