Your Android phone holds your bank accounts, personal photos, messages, and identity documents. How secure is it really? Use this checklist to find out.

1. Check Unknown Sources

Go to Settings > Security. Make sure "Install from unknown sources" is turned OFF. This prevents malicious APKs from being installed without your knowledge.

2. Review App Permissions

Go to Settings > Privacy > Permission Manager. Check which apps have access to:

Camera — Only camera and video apps should have this

Microphone — Only calling/recording apps need this

Location — Be strict; most apps don't need constant location access

Contacts — Only messaging and calling apps need this

Storage — Be careful with full storage access

3. Check for Root/Jailbreak

Rooted devices bypass Android's security sandbox. Banking apps and payment apps (like Google Pay, PhonePe) may refuse to work on rooted devices for good reason.

4. Audit Overlay Permissions

Overlay permissions let apps draw over other apps — this is how screen recording trojans steal your banking credentials. Go to Settings > Apps > Special access > Display over other apps. Disable for any app that doesn't genuinely need it.

5. Check Accessibility Services

Malicious apps abuse Accessibility Services to read your screen, intercept OTPs, and perform actions on your behalf. Go to Settings > Accessibility and review which apps have access. Only screen readers and genuine assistive apps should be listed.

6. Update Everything

Android OS: Settings > System > System update

Apps: Google Play Store > My apps > Update all

Security patch: Settings > About phone > Android security patch level (should be within last 3 months)

7. Enable Google Play Protect

Open Google Play Store > Profile > Play Protect. Make sure "Scan apps with Play Protect" is enabled. This scans installed apps for malware.

8. Set Up Screen Lock

Use fingerprint or a 6-digit PIN minimum. Avoid pattern locks (easily shoulder-surfed) and 4-digit PINs.

9. Enable Find My Device

Settings > Security > Find My Device. This lets you locate, lock, or wipe your phone if it's lost or stolen.

10. Review Connected Accounts

Settings > Accounts. Remove any accounts you don't recognize. Check Google account security at myaccount.google.com/security.

Automate with Cyber Rakshak

Cyber Rakshak's Device Health Check runs all these checks automatically and gives you a security score out of 100. It detects:

Root/jailbreak status

Unknown sources enabled

Dangerous permission combinations

Overlay abuse apps

Accessibility service abuse

Outdated security patches

Missing screen lock

Get a comprehensive report in under 10 seconds.

Know your device's security score. Download Cyber Rakshak.

Device Security Checklist: Is Your Android Safe?