Android security: Features, threats, and best practices

How secure is Android?

Android is widely considered secure, as the second most popular mobile operating system in Australia. It has a range of built-in security features, including malware protection, spam filters, and encryption for sensitive data like payment details. Plus, it receives monthly security update patches designed to fix bugs and close security gaps.

That said, the very fact that Android devices are so widespread makes them a priority target for hackers, scammers, and other cybercriminals. So, although its security features provide effective protection against many threats, risks like malware hidden in shady apps and phishing links sent in texts can still slip through and leave you vulnerable to harm.

Key Android security features

Android has a wide range of built-in tools that work behind the scenes to protect your device and data from harm. These features help block threats, lock down lost devices, and add extra layers of protection against everyday risks. These are some of the main Android security features that it’s worth knowing about.

Spam and phishing protection

Android has built-in spam and phishing defences across its core apps. Google Messages, the default SMS app, aims to filter suspicious texts before you even open them, for example. It can help block potential smishing attempts and warns you if a message you've received contains a link that looks dangerous.

The Phone app adds another layer of protection against scammers, with built-in Caller ID and spam protection that analyses unknown incoming calls and alerts you to likely scams in real time.

Google Play Protect

Built into the Play Store, Google Play Protect is Android’s main malware defence system. It scans apps before you install them to help you avoid accidentally downloading anything harmful. But It also regularly scans all of your installed apps, meaning it can catch potentially dangerous new updates or third-party apps, too.

Google Play Protect is a powerful built-in foundation for device-level malware and virus protection. For extra protection, you can add an extra layer of defence with a dedicated app like Norton Mobile Security for Android, which also includes AI-powered scam detection and Wi-Fi security features.

Two-factor authentication (2FA)

Android supports 2FA, an account security feature which requires a second type of verification beyond a password when you log in to accounts. This verification could be a short code sent to your inbox or a fingerprint scan. It means, even if someone has your password, they won’t be able to hack your account.

The main 2FA feature in Android is the ability to use your phone itself as an authenticator. This allows you to log in to your associated Google account on other devices seamlessly, approving the log-in request with a simple tap while ensuring people without access to your phone are locked out.

Payment protection in Google Wallet

When you make a contactless or online payment with a card saved in your Google Wallet, your real card number is never shared with the merchant. Instead, Android creates a virtual account that's unique to your device and used in place of your actual card details during the transaction.

This means that even if a merchant suffers a data breach, your actual card number can't be exposed, because it was never transmitted in the first place. Plus, each payment is authorised through your device's biometric or PIN unlock, adding a layer of identity verification at the point of sale.

Automatic cloud backups

Android automatically backs up and encrypts key data like your contacts, call history, device settings, and SMS messages to your Google account. This is useful on a practical level for accessing your data when you don’t have access to your phone. But it also has security benefits.

If your phone is lost, stolen, or damaged, for example, it’s quick and easy to restore your data to a new device. You just have to sign in to your Google account during setup and your apps and settings are restored. It also means a factory reset performed as a security measure doesn't mean you lose all of your data.

Camera and mic indicators

Whenever an app is actively using your camera or microphone, Android indicates it with a green icon in the top corner of the screen. This gives you a real-time visual cue that your device's sensors are in use, which can reveal if an app is using your camera or mic without your permission.

You can tap the green icon when it appears to see exactly which app is using your camera or microphone, and tap See recent access to jump straight to the permissions dashboard to revoke access if needed.

App permissions dashboard

The Privacy Dashboard in Android gives you a centralised view of which apps have access to sensitive permissions, including your location, camera, microphone, and contacts. You can review permission usage over time, revoke access for any app directly from the dashboard, and set permissions to expire automatically after a single use.

This is particularly useful for spotting apps that are accessing data they have no clear reason to need, like a simple single-player game requiring access to your contacts, for example. Overly broad permissions can be a sign of malware or spyware at worst, or an app that doesn’t respect your privacy at best.

Google Password Manager

Google Password Manager is built into every Android as a default feature included with a Google account. That means it’s available on Chrome and other Google apps by default, without having to download anything.

Similar to Norton Password Manager, Google Password Manager allows you to generate, securely store, and autofill strong, unique passwords for all of your accounts. It also includes cross-device syncing, which means you can access your passwords on all of your Android devices or Chrome instances.

Regular security updates

Google releases regular Android security patches to fix known vulnerabilities across the OS. The details of these patches are available publicly in the form of monthly security bulletins. This helps keep Android devices protected against new threat vectors, like emerging malware strains or new social engineering techniques.

Safe mode

Android’s safe mode allows you to power your phone on in its most lightweight form, with only essential system apps enabled. If your device is acting unusually, using safe mode can help you figure out whether the issue is being caused by a third-party app that might be infected with malware.

To reboot into safe mode, pull down from the top of your screen twice to open the system tray, tap the power icon to open the power options, and then long-press the power icon until you see a message that says something like “Reboot to safe mode.”

Theft protection and Find My Device

Android's theft protection features are designed to lock down your device quickly if it's taken and then help you recover it if possible. The Theft Detection Lock uses on-device sensors to recognise the sudden motion patterns associated with snatching and automatically locks the screen. And, if your phone goes missing, Find My Device lets you locate it on a map, lock it, or even erase its data remotely.

Common Android security threats

Despite the strong built-in protections and security features, Android devices can still be vulnerable to various threats like advanced malware, scams, and dangerous networks.

These threats aren’t unique to Android by any means, but understanding them can help you spot risks and take action before your device, data, or bank account is compromised:

• Malware: While apps downloaded through the Play Store will generally be safe thanks to Google’s in-depth Play Protect malware scanning process, apps from third-party sources may contain malware that steals your data, impacts your privacy, or causes performance issues like crashing apps or making your phone slow.
• Phishing and smishing: Phishing attacks delivered by email, phone, or SMS may try to trick you into sharing your passwords, financial details, or sensitive personal information, with scammers impersonating entities you trust like your bank or the USPS. Android’s phishing protection can catch some of these attempts, but sophisticated attacks may slip through the net.
• Spyware: If your Android device gets spyware, cybercriminals may be able to steal your data, secretly monitor your activity, track your location, or even record audio and video. Spyware can be hidden in seemingly harmless apps and runs quietly in the background, but running regular scans with a dedicated mobile security app can help you detect it.
• Public Wi-Fi attacks: Public Wi-Fi networks like the ones you might use at cafes or airports can be hijacked, or hosted, by hackers. If you connect without protection like a virtual private network (VPN), any sensitive data you transmit may be exposed to bad actors who can use it to launch account takeover attacks or even steal your identity.
• SIM swap fraud: SIM swapping is a social engineering scheme that involves criminals convincing a carrier to transfer your phone number to a SIM card they control. Once they control your number, they can bypass 2FA protections and hijack your online accounts, getting access to your finances or more sensitive data.

It’s also worth noting that rooting your Android phone introduces lots of additional risks. This process involves modifying your device’s system settings, which can often remove built-in security measures and open the door to system- or app-level attacks if you’re not careful.

Tips to boost security on Android devices

Android gives you the security framework you need to keep your device and data safe. But it’s not a completely hands-off experience — there are some practices you need to commit to to ensure your Android phone or tablet is protected against some of the main cyber threats:

• Keep your OS and apps updated: Install every Android system update and security patch as soon as it’s available, and enable automatic app updates in the Google Play Store settings. This will help keep your device protected against the latest threats, including new types of malware.
• Download apps from the official app store: The Google Play Store scans for harmful code in apps and blocks or flags anything which may pose a threat to your security or privacy. If you only ever install apps from the official Play Store rather than third-party sources, you’ll be much more likely to avoid dangerous or fake apps.
• Review and limit app permissions: Regularly check the Android permissions dashboard to see which apps have access to your camera, microphone, location, or contacts. If an app has excessive permissions for its use case, remove them or consider deleting the app altogether.
• Turn on Find My Device: Enable the Find My Device feature to make sure you can track, lock, or erase your phone if it’s lost or stolen. This can provide a major privacy lifeline if your phone ends up in the wrong hands, wiping sensitive data like your passwords and banking details before they’re accessed.
• Consider a reputable mobile security app: While Android’s built in security is relatively robust, a dedicated mobile security app can help improve your protection, including by detecting more threats, stopping pop-up ads, and even blocking spam calls before they reach you.
• Use a VPN: Enabling a VPN encrypts your internet connection, which is especially useful when on public or potentially dangerous Wi-Fi networks. It adds a layer of protection against your data being intercepted when you’re checking your email or banking apps.
• Use a strong PIN or password: Avoid simple device access codes like 1234 to prevent potential phone thieves from being able to access your data with ease. A strong, secure password, PIN, or biometric lock makes it much harder for thieves to unlock your device.
• Be cautious of scams: Be constantly wary of the risk of scams, avoiding clicking unknown links, screening suspicious calls, and taking steps to stop spam texts or emails that try to trick you into sharing personal info.

Protect your Android devices and more

Mobile phones contain so much sensitive data that they’re an obvious target for cybercriminals running scams or fraudulent schemes. That’s why it’s so important to take mobile protection seriously. Android’s built-in features can help in all sorts of ways but, for even more security, get Norton 360 Deluxe.

It includes antivirus, malware, and ransomware protection, scam detection capabilities, a built in password manager and VPN, plus more. And one subscription gives you protection across up to three devices, including Androids, iPhones, Windows computers and Macs.

FAQs

Which is more secure, Android or iOS?

Both Android and iOS have robust device security, protecting users against many of the major mobile threats. However, iOS is typically deemed slightly more secure because it offers less control and customisability than Android. This means you’re less likely to accidentally install something harmful or disable a critical security feature on an iPhone or iPad than an Android device.

How can I run a security scan on my Android phone?

You can run a scan using Google Play Protect in the Play Store settings. It checks installed apps for harmful behaviour. For deeper scans, a trusted mobile security app or a malware scanner tool can help detect malware and other threats.

Do Android phones have built-in security?

Yes, Android includes built-in protections like app scanning, device encryption, biometric locks, and Find My Device. Regular security updates also help patch vulnerabilities and improve overall protection.

How do I protect an Android phone from hackers?

Keep your device updated, use a strong PIN or password, turn on two-factor authentication, and avoid suspicious links or downloads. Adding a reputable mobile security app and using a VPN on public Wi-Fi can further reduce your risk.