Android Security Guide: Lock Down Your Phone in 15 Minutes

A concise Android security checklist for 2026 — screen lock, Play Protect, permissions, backups, and lost-device recovery.

Table of contents

Screen lock and biometrics
Google Play Protect
Review app permissions
Two-step verification
Find My Device
Backups

Modern Android is a genuinely secure platform, but only if you turn on the features that make it secure. This is the fifteen-minute checklist we walk every friend and family member through.

Screen lock and biometrics

Set a PIN of at least six digits or a password. Biometrics — fingerprint or face — are convenient, but the underlying PIN is what actually protects the device. Turn on automatic lock after thirty seconds of inactivity.

Google Play Protect

Open the Play Store, tap your profile picture, then Play Protect. Make sure scanning is on and 'Improve harmful app detection' is enabled. Run a scan now; it takes a few seconds and flags anything suspicious.

Review app permissions

Under Settings, Privacy, Permission manager, go through each category — location, microphone, camera, contacts. Set anything that does not need constant access to 'Ask every time' or 'Only while using the app'. You will be surprised how many apps had background permissions you never approved.

Two-step verification

Enable two-step verification on your Google account. Prefer a passkey or a hardware key if you have one; an authenticator app is the next best option. SMS is better than nothing, but it is the weakest of the choices.

Find My Device

Confirm Find My Device is on under Settings, Security. If the phone is lost, you can lock, ring, or wipe it from any browser. Test it once so you know how it works before you need it.

Backups

Google One backup covers app data, call history, SMS, and settings. Photos are handled separately by Google Photos. Confirm both are running on a schedule you are comfortable with.

Layer this checklist on top of our Google Account safety guide and you are covered end to end.