Device Security Checklist: Is Your Android Safe?

Your Android phone holds your bank accounts, personal photos, messages, and identity documents. How secure is it really? Use this checklist to find out.

1. Check Which Apps Can Install Other Apps

Android can let an individual app install other apps. Find that setting on your phone and turn it off for anything that does not genuinely need it — this is how malicious APKs get onto a device without the owner noticing.

2. Review App Permissions

Go to Settings > Privacy > Permission Manager. Check which apps have access to:

Camera — Only camera and video apps should have this

Microphone — Only calling/recording apps need this

Location — Be strict; most apps don't need constant location access

Contacts — Only messaging and calling apps need this

Storage — Be careful with full storage access

3. Check for Root/Jailbreak

Rooted devices bypass Android's security sandbox. Banking apps and payment apps (like Google Pay, PhonePe) may refuse to work on rooted devices for good reason.

4. Audit Overlay Permissions

Overlay permissions let apps draw over other apps — this is how screen recording trojans steal your banking credentials. Go to Settings > Apps > Special access > Display over other apps. Disable for any app that doesn't genuinely need it.

5. Check Accessibility Services

Malicious apps abuse Accessibility Services to read your screen, intercept OTPs, and perform actions on your behalf. Go to Settings > Accessibility and review which apps have access. Only screen readers and genuine assistive apps should be listed.

6. Update Everything

Android OS: Settings > System > System update

Apps: Google Play Store > My apps > Update all

Security patch: Settings > About phone > Android security patch level (should be within last 3 months)

7. Enable Google Play Protect

Open Google Play Store > Profile > Play Protect. Make sure "Scan apps with Play Protect" is enabled. This scans installed apps for malware.

8. Set Up Screen Lock

Use fingerprint or a 6-digit PIN minimum. Avoid pattern locks (easily shoulder-surfed) and 4-digit PINs.

9. Enable Find My Device

Settings > Security > Find My Device. This lets you locate, lock, or wipe your phone if it's lost or stolen.

10. Review Connected Accounts

Settings > Accounts. Remove any accounts you don't recognize. Check Google account security at myaccount.google.com/security.

Where Cyber Rakshak Fits

There is no device check you can run today. The screen is a placeholder, and the app has not been released.

Coming at launch: a version of this checklist the app runs against whatever the device is willing to tell it, so the parts that can be read are read for you and the rest stay a manual check.

Until then, the checks above are worth more done by hand than any number out of 100 would be.

Know what your phone is actually doing. Ten minutes, once a quarter.