Make Android safer in about 10 minutes: ten essential checks

Before you begin: Android devices are not all identical

These recommendations cover Android phones and tablets from Google Pixel, Samsung Galaxy, Xiaomi, Redmi, POCO, Motorola, OPPO and other manufacturers. Menus differ between standard Android, One UI, HyperOS and other interfaces; some features are restricted by software version, hardware or region. If a menu is missing, try the search field in Settings and check your manufacturer's help page.

Devices without Google Play or Google services will not have all the Google-specific settings below, such as Play Protect, Google backups or Google's Find Hub. Use trustworthy equivalent services documented by the manufacturer; do not install unofficial Google packages simply to follow these instructions.

This is a checklist, not a malware scan. If your phone is managed by an employer or school, consult the administrator before changing managed settings.

Ten checks you can make in Settings

1. Check Android updates and security patches. Go to Settings → About phone → Android version (or About device) and find the Android security patch date. For updates, search Settings for “Software update” or “System update”. On Pixel, check System; on Galaxy, Software update; and on recent Xiaomi/Redmi devices, About phone → Xiaomi HyperOS. Review Google Play system updates if present. No updates available does not mean that an older device still receives security support. Android update instructions.
2. Use a strong screen lock. Search Settings for “Screen lock”. Prefer a long PIN (ideally six digits or more) or a password. Add fingerprint or another supported biometric method if useful, but remember it relies on a backup passcode. Avoid obvious PINs and check what appears in lock-screen notifications.
3. Protect the account that controls your phone. If you use Google, open myaccount.google.com/security yourself or Settings → Google → Manage your Google Account → Security. Review two-step verification, recovery options and connected devices. If you use passkeys, keep an independent recovery method. Check the manufacturer's account separately when applicable. Our passkeys and MFA guide explains the options.
4. Check Google Play Protect where available. Open Play Store → profile picture → Play Protect. Check for warnings and verify that app scanning is enabled. Play Protect can identify harmful applications, including some installed outside Google Play, but cannot guarantee it detects everything. If your device does not have Google Play, do not install an unofficial copy simply to obtain Play Protect. Google's explanation.
5. Review application permissions. Look for “Permission manager” or Settings → Security & privacy → Privacy → Permission manager. Another common route is Settings → Apps → [app] → Permissions. Check camera, microphone, location, contacts and photos. Grant only what is necessary; “While using the app” often works for location. Avoid disabling everything if an app needs it for navigation, calls or emergency functions. Android permissions guide.
6. Know which apps can install software. Avoid APK files sent by strangers. Search Settings for “Install unknown apps” and inspect which apps have the permission. Also consider Accessibility, notification access and device administrator permissions, which can be powerful but may be legitimate. Do not turn off security features just because a website claims you must install an update or claim a prize.
7. Prepare to find your device. On Android with Google services, search Settings for “Find Hub”, “Find My Device” or “Find device”, or go through Google → All services where available. Check the account and location settings. Before any loss occurs, check android.com/find on a trusted device. Offline finding depends on compatible software. Xiaomi's optional Find device service in Xiaomi Cloud is separate from Google's Find Hub. Google's Find Hub instructions.
8. Review theft protection if supported. Search Settings for “Theft protection”, or try Settings → Google → All services → Theft protection. Check Theft Detection Lock, Offline Device Lock and Remote Lock if shown; some may already be active. Not every Android device supports them. Google excludes Android Go devices, tablets and wearables from these particular theft controls; feature requirements vary. Compatible Samsung devices also offer Auto Blocker, which addresses a different set of threats. Official eligibility details.
9. Confirm that you actually have a recent backup. On supported Google devices, look for Settings → Google → All services → Backup. Review what is included, which account is used, available space and the latest backup date. Photos, chats and downloaded files may need separate backups; not every app can restore all its data. If Google backup is unavailable, review a reputable alternative provided by your manufacturer. Backup details.
10. Check browser, links and Wi-Fi habits. Update Chrome or your preferred browser through a legitimate source. Do not enter codes from unexpected WhatsApp, SMS or email messages into unfamiliar websites. Use your bank's known address or official app. Wi-Fi encryption, router updates and backups help, but a VPN or antivirus is never a substitute for careful decisions. Read what VPNs actually protect.

Finding the right setting on your phone

If the path is different, search Settings by the feature name first. These are documented examples, not promises that every model and software version uses an identical menu.

Manufacturer sources: Samsung updates (Spanish), Samsung Auto Blocker, Xiaomi HyperOS updates and Xiaomi Find device.

If your Android phone is lost or stolen

1. From a trusted device, visit android.com/find if you previously set up Google's Find Hub. Attempt to find, secure or mark the device as lost using available options.
2. Contact your carrier if you no longer control the SIM/eSIM, and review email, bank and other important account sessions.
3. Contact the authorities if you suspect theft. Never confront a suspected thief yourself.
4. Remote erasure is a last resort; consider its consequences if you have unbacked-up files or evidence on the device.

If you used Xiaomi Cloud's Find device, check that service too. No service can promise a location if the phone is not connected or was never set up.

Security decisions that can make things worse

• Do not install supposed miracle phone cleaners or antivirus packages from browser pop-ups.
• Do not disable Play Protect or screen lock to follow instructions from an unknown website.
• Do not switch off all location services without considering emergency features, mapping and finding a lost phone. Review app permissions instead.
• Do not confuse “No update available” with continued security patch support for an old phone.
• Do not assume every Android device has the same theft and privacy controls, even at the same Android version.

Effective security has several layers: supported software, secured accounts, trustworthy apps, recoverable backups and good judgment about links and messages.

Frequently asked questions

Sources and editorial review

Checked on 30 October 2026 using official Google/Android, Samsung and Xiaomi documentation. We have not physically tested every Android model or compared update times. These are examples by device family, not universal menu paths. Some features depend on Google services, OS versions and supported hardware. No affiliate links or sponsored security software.

• Android: versions and security patches
• Android: application permissions
• Google Play Protect
• Find Hub
• Theft protection and compatibility
• Android backups and restore
• Samsung Galaxy updates (Spanish)
• Samsung Auto Blocker
• Xiaomi HyperOS update instructions
• Xiaomi Find device

See also essential iPhone security checks, passkeys and MFA and WhatsApp account protection.