Secure Your Android Phone

Simple, clear steps to protect your Android phone or tablet: strong screen lock, fingerprint setup, sensitive app locks, Google Account security, Find My Device, and cloud backups.

Digital Security Centre / Secure Your Android Phone

Follow this Android route only

These steps are written specifically for Android phones and tablets, including Samsung Galaxy, Google Pixel, Motorola, and Xiaomi devices. Menu labels can vary slightly between manufacturers. If you cannot locate a specific menu option immediately, tap the magnifying glass search bar at the very top of your Settings app and type the bold words.

The Security Priority: Create a strong screen lock PIN, register your fingerprints with the dual-finger technique, protect sensitive banking and email apps with a secondary vault, and ensure your primary Google Account has Find My Device and cloud backups active.

Your five safety layers

🔄
1. Updates
Patches system bugs
🔐
2. Screen Lock
PIN or password
👆
3. Biometrics
Multi-fingerprint scan
📍
4. Find Device
Lost GPS tracking
☁️
5. Backup
Google One cloud

Your smartphone is often used to approve account sign-ins, read two-factor authentication codes, and send bank payments. If someone bypasses your lock screen, they can gain access to your email, personal photos, and linked financial accounts.

1Set a strong screen lock and fingerprint scanner

Never rely on a simple swipe or an easy pattern that leaves visible grease marks across your screen glass. A secure numeric PIN or alphanumeric password is your master defense.

A. Configure your screen lock PIN or password

Settings → Security & privacy → Device unlock → Screen lock
  1. Open your phone Settings (the gear icon).
  2. Tap on Security & privacy (or Lock screen on Samsung devices).
  3. Tap Screen lock (or Screen lock type on Samsung).
  4. Choose PIN or Password. Never choose Swipe or None.
  5. Enter at least a 6-digit PIN (or a memorable passphrase). Never use 123456, 000000, your birth year, or codes friends have seen you enter.
  6. Set Automatically lock to Immediately or 30 seconds after the screen turns off so the phone secures itself as soon as you put it down.

B. Register fingerprints with the dual-finger technique

Settings → Security & privacy → Biometrics → Fingerprints
  1. Type your new 6-digit PIN to open the biometrics menu.
  2. Tap Add fingerprint.
  3. Place your thumb on the scanner. Lift and press repeatedly as prompted.
  4. Pro Trick: On Fingerprint 1, alternate between your Left Thumb and Right Thumb on each tap until the meter hits 100%. This saves both thumbs inside a single slot!
  5. Tap Add fingerprint again for Fingerprint 2, and alternate between your Left Index and Right Index fingers.
  6. Use your remaining slots to capture the side edges and tips of your fingers so unlocks work from any angle.
Samsung Galaxy Navigation: On Samsung devices, go to Settings > Security and privacy > Lock screen > Screen lock type to set your PIN, then go to Settings > Security and privacy > Biometrics > Fingerprints to register your fingers. If you use a tempered glass screen protector, open Settings > Display and switch on Touch sensitivity.

2Add an extra layer of lock protection to sensitive apps

Even if you hand your unlocked phone to a friend or classmate to show them a video, they should never be able to open your banking apps, private emails, or password vault.

Option A: Android Private Space (Android 15+)

Built into modern Android versions, Private Space creates an isolated, encrypted digital compartment for private apps.

Settings → Security & privacy → Private space
  1. Unlock with your screen PIN or fingerprint.
  2. Tap Set up, and choose to lock Private Space with a separate, dedicated PIN if offered.
  3. Sign into your primary Google Account inside Private Space and install your banking, email, and password manager apps.
  4. In your app drawer, scroll down to Private Space and tap Lock whenever you finish using your apps.

Option B: Samsung Secure Folder

Samsung Galaxy phones include Knox-encrypted Secure Folder with its own independent biometric lock.

Settings → Security and privacy → Secure Folder
  1. Tap on Secure Folder and sign into your Samsung Account.
  2. Select your lock type (PIN or Password) and turn Fingerprints to ON.
  3. Open Secure Folder and tap the plus button (+) to add or download separate copies of your banking apps and email.
  4. Tap the three dots menu in Secure Folder and set Auto-lock Secure Folder to Each time I leave the app.
Turn on internal app locks: Open your banking app, password manager (e.g. Bitwarden), and WhatsApp. Go to Settings > Privacy > App lock or Biometric login and toggle it ON. This ensures the app requests your fingerprint every single time it opens.
Avoid third-party "App Lockers" from search ads: Never download random "AppLock" or "Clean Master" apps from internet ads or unverified publishers. Many of these tools collect user data, display spam ads, or stop functioning after updates. Always stick to built-in Android Private Space, Samsung Secure Folder, or the app's official internal settings.

3Protect your primary Google Account

Your Google Account manages your Android phone's security, tracks its location, and stores your cloud backups. Ensure it is guarded with two-step verification:

Settings → Google → Manage your Google Account → Security
  1. Open your phone Settings, scroll down, and tap Google.
  2. Confirm your primary Gmail address is shown at the top. Tap the blue Manage your Google Account button.
  3. Swipe across to the Security tab.
  4. Verify that 2-Step Verification is turned ON. Set up an Authenticator App (like Google Authenticator) or a Passkey linked to your fingerprint sensor.
  5. Review your Recovery phone and Recovery email. Confirm that these details are up to date and belong to you.
  6. Scroll down to Your devices. Tap Manage all devices and immediately sign out of any old phones, tablets, or unfamiliar computers you do not recognize.
  7. Tap Backup codes, generate 10 emergency recovery codes, and write them down on paper in a safe place at home.
Authenticator App Tip: When setting up 2FA for online accounts on a computer, open Google Authenticator on your phone, tap +, scan the computer screen, and enter the temporary 6-digit code. Never dictate or share these codes with anyone over a phone call.

4Turn on Find My Device tracking

If your phone is lost at school, left on public transport, or stolen, Google's Find My Device network helps you locate it on a live map, ring it at full volume, or wipe it remotely.

Settings → Google → All services → Find My Device
  1. Tap Find My Device and ensure the main toggle switch for Use Find My Device is turned ON.
  2. Under Find your offline devices, select With network in all areas so your phone can be located by the encrypted crowd-sourced Android network even when it has no mobile signal or Wi-Fi.
  3. Keep your phone's main Location (GPS) setting turned on for accurate tracking.
  4. Test access: Open android.com/find on a family laptop or tablet and confirm you can see your phone's battery level and live map location.
If your phone is stolen: Go to android.com/find from another device immediately. Click Secure Device to lock the screen with your PIN and display an emergency contact number. If you cannot recover it safely, click Erase Device. Never confront a thief or track a stolen phone alone; share the live map location directly with the police.

5Install security updates and audit app permissions

Keep your device operating system updated and verify that simple utility apps or games are not secretly accessing your private sensors.

Settings → System → Software updates (or Software update on Samsung)
  1. Tap System update (or Download and install) and install any pending updates. Leave your phone plugged in and on Wi-Fi.
  2. Go to Settings > Security & privacy > Updates > Google Play system update and install any pending Google Play security components.
Settings → Security & privacy → Permission manager
  1. Tap Permission manager.
  2. Tap Location, Camera, and Microphone one by one.
  3. Review the list of apps. For each app, choose Allow only while using the app or Don't allow. A calculator, torch, or offline game should never have permission to use your camera or microphone!
  4. Open the Google Play Store, tap your profile picture, and tap Play Protect. Ensure Play Protect scanning is active to inspect apps before they install.
  5. Never enable "Install unknown apps" or download unofficial APK files from internet browsers or pop-up ads.

6Back up your contacts, photos, and messages

Google One provides automated cloud backups of your text messages, call history, contacts, apps, and system settings every day.

Settings → Google → Backup → Back up now
  1. In phone Settings, tap on Google > Backup.
  2. Ensure the switch for Backup by Google One is turned ON.
  3. Tap the blue Back up now button to make a complete snapshot of your device before travelling, updating, or performing repairs.
  4. Wait for the progress line to finish and verify that Last backup shows today's date and time.
  5. Back up photos and videos: Open the separate Google Photos app. Tap your profile picture in the top-right corner, select Photos settings > Backup, and toggle it ON.
Extra safety: Important school coursework, assignments, and family video files can also be copied onto a computer or external USB drive by plugging your phone into a laptop with a USB charging cable.

Your master Android security checklist

Once today: Set a strong 6-digit PIN and register your fingerprints.
Once today: Enable Private Space, Secure Folder, or app-level biometric locks.
Once today: Turn on Find My Device and Google One cloud backup.
Every week: Check for Android system updates and Google Play system updates.
Every month: Audit Permission Manager to turn off unused camera and mic access.
Every few months: Review Google Account active devices and sign out old hardware.
Situation The correct action to take first What you must NEVER do
Unexpected phone call or text from your "bank" Hang up immediately and open the official banking app yourself. Never give verification codes, PINs, or card numbers to a caller.
Your Android phone goes missing Go to android.com/find from a laptop and click "Secure Device". Never delete the phone from your Google Account while searching for it.
A new game requests contacts, camera, and location Read each prompt carefully and deny unnecessary permissions. Never tap "Allow" automatically without reading.