{"id":21245,"date":"2023-06-14T05:56:34","date_gmt":"2023-06-14T09:56:34","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/how-to-lock-your-android-smartphone\/21245\/"},"modified":"2023-06-14T14:56:56","modified_gmt":"2023-06-14T10:56:56","slug":"how-to-lock-your-android-smartphone","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/how-to-lock-your-android-smartphone\/21245\/","title":{"rendered":"What’s the best way to lock your smartphone?"},"content":{"rendered":"

The latest Android smartphones offer various different ways to lock the screen. You can set up a pattern lock, PIN or password, or unlock it with your fingerprint or even your face. Such a variety of options can be confusing, so let\u2019s find out which method is the most secure, and which is the most practical.<\/p>\n

PIN code<\/h2>\n

Modern operating systems effectively prevent intruders from guessing your PIN code by limiting the number of login attempts and increasing the interval between new attempts. Therefore, in theory, a PIN code \u2014 especially a long one, consisting of six or eight digits \u2014 could be a fairly secure option for protecting your smartphone.<\/p>\n

But there are a couple of key points to bear in mind. First, to ensure maximum security, a PIN should ideally be a random string of numbers. But most people tend to set something easy to guess \u2014 most often based on their date of birth. This makes it much easier to break into the phone.<\/p>\n

Secondly, in order for the PIN code to protect your phone effectively, it must be kept in secret. The average person unlocks their smartphone very frequently \u2014 hundreds of times a day. So if someone is aiming to sneak a peek at your PIN code, they\u2019ve plenty of opportunities.<\/p>\n

Password<\/h2>\n

A complex password \u2014 that is, a combination of characters using both numbers and letters \u2014 is much more secure than even a long PIN code. With the restrictions the operating system puts on the number of login attempts, it\u2019s almost impossible to guess it. It\u2019s also more difficult to peek at and remember.<\/p>\n

But there\u2019s an obvious handicap: entering a lengthy password hundreds of times a day gets very tedious. So such a security measure is only suitable as a backup option, which complements a more convenient way of unlocking your phone \u2014 say, using your fingerprint.<\/p>\n

Pattern lock<\/h2>\n

A pattern lock is probably the least secure way of protecting your smartphone. In theory, there are about 390 thousand possible lock patterns on an Android device. Some of them are truly complex. But in practice most people use very short, easy to guess patterns<\/a>.<\/p>\n

In about 50% of cases, the patterns start from the upper left corner \u2014 that is, the starting point is very predictable. And of course, people tend to use memorable shapes for their pattern locks. That makes guessing the right pattern much easier than it might seem at first.<\/p>\n

Also, it\u2019s not too hard to take a peek at someone entering their pattern lock and remember it: distinctive finger movements are easier to track than touching virtual buttons. In addition, entering patterns often leaves marks on the screen, further improving chances of a successful hack. Given all of the above, we strongly advise against using a pattern lock to protect your smartphone.<\/p>\n

Fingerprint<\/h2>\n

The technology used to unlock a smartphone by fingerprint appeared in its current form 10 years ago, so by now it\u2019s been well tested. Of course, it has its drawbacks: there are several ways<\/a> of getting into the phone by creating a fake fingerprint of the phone\u2019s owner.<\/p>\n

In addition, researchers have recently discovered a number of vulnerabilities related to this authentication method. There was an attack that exploits these vulnerabilities named BrutePrint. It allowed hackers to brute force<\/a> the fingerprint recognition mechanism.<\/p>\n

However, these are all sophisticated techniques that require a fairly high level of expertise, as well as certain exotic equipment and the motivation to spend a lot of time and effort on hacking. Therefore, for the vast majority of Android users, fingerprint authentication remains a secure option.<\/p>\n

Of course, if your phone contains highly confidential information, you may need to take such sophisticated attacks into account in your personal threat model<\/a>. In that case, we recommend only using a long password and entering it as infrequently and as secretly as possible so that nobody gets a chance to see it. But for the rest of us, the best option for \u201ceveryday\u201d Android smartphone unlocking is still a fingerprint, which can be complemented by a long PIN code or, even better, a complex password, as a backup method.<\/p>\n

Face recognition<\/h2>\n

Unfortunately, for Android there\u2019s no full-fledged analog of the already well-established Face ID technology<\/a> that\u2019s used in iPhones. Android smartphones use the front camera for face recognition. It\u2019s a significantly less secure method that\u2019s much easier to trick.<\/p>\n

Google speaks about this quite eloquently itself. To date, the company cites the Face Unlock function as the least secure. That\u2019s why, starting with Pixel 7, you can only use face recognition to unlock the screen, but you can\u2019t confirm payments or log in to applications<\/a>:<\/p>\n

\u201cYou can\u2019t use Face Unlock on Pixel 7 or later to sign in to apps or make payments. For those activities, you can make use of Fingerprint Unlock and\/or strong passwords, patterns or PINs instead.\u201d<\/em><\/p>\n

Even if you\u2019re using a different Android smartphone that does allow you to confirm payments with your face, it\u2019s unlikely that the technology running on it is any more secure. In my view, all Android smartphone owners should heed Google\u2019s advice: it\u2019s better to avoid using face recognition to unlock your phone.<\/p>\n

How to securely protect your Android smartphone from strangers<\/h2>\n

To sum up: the perfect security combo for Android phones is a fingerprint for everyday unlocking, plus a long PIN code \u2014 or even better, a strong password \u2014 as a fallback.<\/p>\n

You\u2019ll be entering your PIN code or password very rarely, so you can be generous with the character length. But make sure to save your password or PIN code in a safe place in case you forget it \u2014 for example, in an encrypted note in Kaspersky Password Manager<\/a>.<\/p>\n

A few final tips:<\/p>\n