Android security settings – step by step
Setting up Android securely: the settings that give you the most protection day to day – screen lock, updates, Play Protect and device finding.
Android is more open than iOS. That gives you more freedom, but it asks for a few deliberate settings. You will find the steps below in the Settings app; the exact names vary slightly by manufacturer.
The short version
- A screen lock with a PIN or password, plus a fingerprint.
- Turn on automatic system and app updates.
- Leave Google Play Protect switched on.
- Review app permissions and take back the ones that make no sense.
- Turn on Find My Device for locating and remote erase.
Step by step
Secure Android in 10 minutes
- Set the screen lock: Settings › Security › Screen lock – PIN or password plus fingerprint.
- Updates: Settings › System › Software update, and in the Play Store Settings › Network preferences › Auto-update apps.
- Play Protect: in the Play Store › profile › Play Protect – leave it on.
- Permissions: Settings › Security & privacy › Permission manager – check location, microphone and camera.
- Find My Device: Settings › Security › Find My Device – turn on.
- Unknown sources: allow installing from unknown sources per app, and only when you genuinely need it.
Screen lock and encryption
With an active screen lock your Android phone is encrypted. Use a PIN or password as the base and a fingerprint for speed day to day. Set a short auto-lock time.
Updates and Play Protect
Install system and app updates automatically. Play Protect keeps scanning apps for malware – leave it on. When you next buy a phone, check how long the manufacturer promises security updates.
Permissions and sources
The permission manager shows you which app can reach what. Take back access that makes no sense, and set location to “Only while using the app”. Install apps from the Play Store as a rule, and avoid downloading installer files from the open web.
Finding your device, and your accounts
Find My Device lets you locate, lock and erase a lost phone. Protect your Google account with two-factor authentication and manage your logins with a password manager .
Common mistakes
- Installing app files from ads or dubious sites.
- Installing “cleaner” and free “antivirus” apps from pop-ups – often harmful themselves.
- Granting device admin or accessibility permissions without thinking.
- Keeping an old phone with no security updates in daily use.
Do you suspect something is already wrong? Then go to the first aid for a hacked phone .
Frequently asked questions
Is Android less secure than iPhone?
Not in principle. Current Android phones are well protected as long as you install updates, download only from the Play Store and leave Play Protect on. What matters is choosing a phone with a long update guarantee.
What is Google Play Protect?
Play Protect is Android’s built-in protection. It checks apps for malware before and after installation. For most users it replaces a separate antivirus app.
Can I install apps from outside the Play Store?
Better not. Installer files downloaded from the web are one of the most common sources of malware. Stick to the Play Store, or another vetted source such as F-Droid if you know what you are doing.