Mobile Devices

In order to keep your data safe from physical access, set up a strong passphrase for your smartphone. All data is encrypted when the phone is locked, and decryption is tied to the user’s password or biometrics. This will mean if your device is lost or stolen, no one will have access to your data. Take a look at which OS versions can be easily hacked if someone has physical access to your device.

Apple typically provides iOS updates for 6 to 8 years. Google Pixel Series has 3 to 7 years, depending on the model. Samsung, OnePlus, Xiaomi, OPPO can offer 2 to 5 years of updates for certain flagship models. The countdown starts from a device’s release date.

Your phone number should not be used for authentication purposes, yet every second website wants it. Make sure the number that your bank and payment provider knows is not the same one you use daily. Setting up a prepaid e-SIM is the most reliable option. There are services that allow you to create and use virtual phone numbers, but each has its own reliability concerns and caveats.

When you're not using Wi-Fi, Bluetooth, NFC or any other wireless features, turn them off. There are several threats that utilise these features. On an iPhone, Wi-Fi and Bluetooth can be turned off in two ways: temporarily via Control Center or permanently via Settings. Use the Shortcuts app to create automation routines that disable Wi-Fi and Bluetooth under specific conditions.

Uninstall apps that you don’t need or use regularly. Apps often run in the background, slowing your device down and collecting data. When an application is allowed to show notifications, it also automatically enables silent remote activation of the app to process any requests from the app backend. While this is technically required for notifications to work, there are cases where it is also used for user tracking.

Applications on the Apple App Store and Google Play Store undergo at least minimal checks before publication, making them less likely to contain 100% malicious code. Anything you download and install from sources claiming "free" games or software will be uncharted territory.

Don’t grant apps permissions that they don’t need. Both iOS and Android have wide permission controls, running applications in a sandbox and allowing access to only certain sensors. Increase your awareness if an application requests access to any of these: Location, Notifications, Accessibility Services, Microphone, Camera, Contacts, SMS and Phone, Storage/Files, Calendar, Bluetooth, Local Network.

Hackers can physically "upgrade" public charging stations to install malware on your smartphone or tablet through a compromised USB port. Always deny if your device asks you if you allow to connect, but you only wanted to charge. BadUSB is a family of attacks, where attached device can simulate keyboard and external storage. Now these microchips are so small, that they could be included in a cable.

Go to your phone’s settings and enable SIM card PIN lock, and change the default PIN. This will require a PIN each time your phone restarts or the SIM is moved to a new device. SIM hijacking occurs when an attacker fraudulently transfers your phone number to their SIM card, gaining access to your calls and incoming SMS. Contact your mobile operator and ask for a "No Port Freeze" or setting "Port-Out Authorization PIN/password". If possible, request that SIM swaps can only be done in person at a carrier store with proper ID. This mostly prevents unauthorized changes to your account. Ensure the password doesn't look like random characters (3-5 words is best). The reason is that it would be verified by a human operator, and a hacker can try to say "I just entered gibberish".