Being Smart About Your Smartphone

Have you ever downloaded an application on your mobile device and pressed the Next button continuously until the application launches? More often than not, the screens that you pass through without reading are authorization forms allowing the app to access information and execute actions on your device. However, granting apps unlimited access to your phone is a bad idea and can put your privacy at risk. Below are some best practices for securing your mobile device and apps.  

Do My Apps Really Need Access to All of This Stuff?

If an app requests access to something, it must need it, right? Not necessarily. Many developers design smartphone apps with a "request all" approach, meaning it is easier to seek permission to everything at the beginning of an install than it is to release an update later when additional permissions are needed. A good example of this is a photo editing app that requires access to the contacts on a mobile device — this request is unnecessary, but it is commonly seen during app installations. 

What Are the Risks?

The more information you allow your smartphone apps to share, the easier it will be for hackers to steal this information and use it for malicious purposes. Locking down the privacy settings on your mobile device is essential to preventing such intrusions. An attacker will try to exploit both your device's software as well as the applications installed on the device. In addition to obvious things like your email and messages, an attacker could gain access to your phone's camera, microphone, contacts, and other data. 

How Can I Protect My Phone and My Data?

There are several simple steps you can take to protect the data and personal information on your phone, whether because your phone is lost or stolen, or because a hacker is trying to gain access remotely.

1. Secure your phone and sensitive apps with a password. Require a passcode, and, if supported, your fingerprint, to gain access to your smartphone. In addition, protect all sensitive apps with a secure password and multi-factor authentication, if supported.
    
2. Perform a regular cleanup of your apps and settings. Delete apps you don't use regularly. Check the app's settings to see if you need to make any adjustments. Hackers can reverse engineer even known applications and then recompile them with malware in order to view your phone's camera, download contact information, turn the speakerphone on and off, and import/export the data on the device.
    
3. Secure your phone's access to Wi-Fi networks. Many people leave their phone's wireless setting turned on at all times because the option to auto-connect to your home or office Wi-fi network saves time and effort. However, in this state, the device must continuously send out a probe seeking its known access points. Hackers can intercept this probe and masquerade as an access point in order to perform a man-in-the-middle attack to view your device's inbound and outbound traffic.
    
4. Download apps only from reputable sources. Only install applications that are distributed by vendor websites or application stores.
    
5. Configure location services wisely. If your device is compromised, an attacker can use this information to discover your workplace or home address.

Smartphone Safety FAQs

The best way to protect your smartphone from an attack is to incorporate a layered security approach. The following are frequently asked questions about mobile device security.

For More Information

For more cyber safety tips and resources you can apply at work and at home, see our Cybersecurity Best Practices and Resources center. If you have any questions, please contact us.