Android will receive 12 new security features in 2026 updates
In its ongoing effort to improve user security and privacy, Google has detailed a comprehensive series of improvements coming to Android phones. The new features aim to combat banking scams, device theft, malware and counterfeit versions of the operating system.
Faced with an increasingly sophisticated cyber threat landscape and complex tactics used by criminals to trick Android users, the company is implementing critical updates to existing functionality. These improvements seek to strengthen protection on several fronts, from detecting fraudulent calls to managing access to personal data. Many of these features will launch with Android 17, while others will soon begin rolling out to older versions.
Automatic blocking of fake calls from banks on Android cell phones
Google is implementing a financial call verification feature on Android. This anti-scam tool is designed to stop calls where criminals impersonate banks and financial institutions. If the system identifies that a call supposedly from a bank is fake, it will be automatically terminated before the scammer even manages to speak to the user.
The technology operates by checking with compatible banking applications installed on the cell phone whether the institution is actually making the call. Google stated that the implementation will begin in the coming weeks for devices with Android 11 or higher, initially with support from banks such as Revolut, Itaú and Nubank.
Real-time threat detection becomes smarter
Android’s real-time threat detection function, powered by artificial intelligence, will be expanded with new safeguards against suspicious app behavior. The system will now alert users about apps that secretly forward SMS messages and abuse accessibility permissions.
More on this story: Blocking accounts on WhatsApp: Meta explains six practices that could suspend your access in 2026
Android 17 will also introduce “dynamic signal monitoring,” a tool that will allow Google to identify apps that hide their icons before starting malicious activity in the background. With this capability, the company will be able to push real-time threat detection rules to combat new malware techniques. The feature is expected to launch in the second half of this year on selected models.
Checking for malware in APK downloads via Chrome on Android
The Chrome browser for Android will receive an extra layer of protection against harmful APK file downloads. With the Safe Browsing feature enabled, Chrome will evaluate APK files for known malware before they are downloaded, protecting users from installing malicious apps.
Significant expansion of Google Advanced Protection Mode
Google is adding several new security measures to Android 17’s Advanced Protection mode. Among the new features are blocking access to accessibility services for apps that are not accessibility tools, disabling device-to-device unlocking, and disabling WebGPU support in Chrome.
Other improvements include the addition of scam detection in chat notifications and Android Enterprise support for managed devices, expected later this year. Google also confirmed that USB protection is now available on all Pixel devices running Android 16 or newer, and will be rolled out to other Android devices soon.
‘Mark as lost’ feature gains biometric protection
The “Mark as Lost” functionality in Find Hub on Android is being improved in Android 17. By enabling it, users will be able to configure their devices to require biometric authentication to regain access. This means that even if someone knows the PIN or password, they will not be able to access the device without fingerprint or facial recognition if the device is marked as lost.
Additionally, Google reported that activating the “Mark as lost” feature will disable new Wi-Fi and Bluetooth connections, and hide the Quick Settings menu.
See Also
Motorola razr fold impresses by being lighter than iPhone 17 Pro Max
Singer Robbie Williams reveals autism diagnosis and finds relief in new perspective
Hulk scores with a header and leaves everything the same in the first half of Fluminense x Palmeiras in the Brasileirão
Theft protections become standard on Android devices
Following a successful pilot project in Brazil, Google is expanding the theft protection features enabled by default globally. On devices running Android 17, Remote Lock and Theft Detection Lock features will automatically be turned on after initial setup, reset, or system update.
Learn more: Gemini assistant surprises by intervening in private conversations on Google Maps without permission
The company will also extend these protections to devices running Android 10 and newer versions in countries such as Argentina, Chile, Colombia, Mexico and the United Kingdom in response to high demand.
Android makes PIN guessing attacks difficult
Google announced that Android 17 will limit the number of failed PIN or password attempts an attacker can make. It was not specified whether this limit is different from what had previously been announced. The company also said that Android 17 will add longer delays between attempts and improve the display of lock screen information after repeated failures.
Temporary precise location sharing comes to Android
With Android 17, Google is introducing a new button for temporary precise location sharing. Instead of granting permanent location access to an app or service, a user can allow access to their exact location only while the app is in active use.
The function is designed for quick tasks, such as finding nearby businesses, without apps having continuous access in the background. The feature is now available in the Beta 3 version of Android 17.
Transparency in location usage is improved on Android
Similar to Android’s camera and microphone indicators, Android 17 will display a more visible location usage indicator whenever apps access the user’s position. This functionality, first seen in Android 16 QPR3, lets you tap the indicator to see which apps have recently used location access and manage permissions immediately.
Applications will have more restricted access to contacts
Google is rolling out a new contact picker that will allow apps to request access to just specific contacts, rather than your entire address book. Additionally, applications may only request access to certain contact fields, and this access will be temporary. The novelty had been observed in November last year and was made official in March this year.
On the same topic: Mercenary spyware notifications are sent by Apple to users in 110 nations
Android 17 will verify the legitimacy of the operating system
Google is introducing Android OS verification to help users confirm whether their devices are running an official version of Android. Initially rolling out on Pixel phones, the feature aims to combat modified versions of Android that appear legitimate but secretly compromise security.
The company is also implementing a public, add-only registry that cryptographically verifies official Google apps and GMS APIs.
One-time password protection and post-quantum security on Android
Android is implementing new layers of protection for one-time passwords (OTPs) and preparing to face post-quantum threats. These initiatives aim to ensure the security of authentications and protect user data against future forms of cryptanalysis.
