Android 16 introduces a streamlined approach to bolstering app and service security. This new feature allows users to significantly enhance device security with a single click, building upon and exceeding Google’s Advanced Protection Program introduced in 2017.
Google’s existing Advanced Protection Program (available here) is accessible to all Google account holders. It’s particularly recommended for individuals facing heightened attack risks, such as political campaign staff, journalists, activists, and business leaders. The program mandates security keys or passkeys for login, provides fortified defenses against malicious downloads, and safeguards personal information by restricting access to Google Account data. It also offers reinforced protection against phishing attempts and unauthorized access.
Android 16’s new feature incorporates these existing protections and expands upon them. Key additions include disabling 2G connectivity and enabling Memory Tagging Extension (MTE), a powerful tool aiding apps in detecting memory-related vulnerabilities.
Android 16 Advanced Protection.
A crucial advancement is the introduction of the AdvancedProtectionManager API. This API empowers apps to verify a device’s enrollment in the Advanced Protection program. Previously, apps lacked this capability, hindering their ability to adjust security measures based on user enrollment. Now, with this API, apps can quickly ascertain a user’s security posture and implement appropriate additional safeguards. This enables a more personalized and effective security approach.
This new feature echoes Apple’s Lockdown Mode, introduced in 2022. Lockdown Mode is an optional, high-security setting designed for users potentially targeted by sophisticated cyberattacks, particularly state-sponsored spyware. Both features offer a heightened level of protection for those who need it most.
While these advancements are promising, the effectiveness hinges on app developer adoption of the new API. Without widespread support, the potential impact could be limited. Nevertheless, Google’s continued commitment to introducing robust security features is a positive step towards protecting users from scams and hacks.
We will continue tracking the development of this Android 16 feature as it progresses towards public release with the full operating system update, expected to be available to manufacturers later this year.
