Google on Tuesday started shipping Android 15 to Pixel devices with a hefty set of security improvements, including theft protection and a private space for sensitive applications.
Android 15’s enhanced security features, such as the new Theft Detection Lock, rely on AI to keep both the device and the user’s data safe.
“By using on-device machine learning, Theft Detection Lock is able to analyze various device signals to detect potential theft attempts. If the algorithm detects a potential theft attempt on your unlocked device, it locks your screen to keep thieves out,” Google explains.
The new capability works together with Offline Device Lock, which locks the device when detecting that it has been offline for a long period of time, to prevent data exfiltration. Lost or stolen Android devices can be locked using Remote Lock, which can be used by supplying a verified phone number.
“You can use any device to visit Android.com/lock and lock your phone with just a verified phone number. Remote Lock secures your device while you regain access through Android’s Find My Device – which lets you secure, locate, or remotely wipe your device. As a security best practice, we always recommend backing up your device on a continuous basis, so remotely wiping your device is not an issue,” Google notes.
To deter theft before it happens, Android 15 now requires authentication to change sensitive settings, locks devices after multiple failed login attempts, and comes with enhanced factory reset protections to prevent device resets without Google account credentials.
Additionally, Google is working on Identity Check, an upcoming opt-in feature that will require biometric authentication to access critical Google account and device settings, to prevent unauthorized access even if the PIN has been compromised.
On devices running Android 15, users can also keep their sensitive applications, such as social, dating, and banking apps, in a separate private space that, when locked, makes the applications virtually invisible, hiding them from the apps list, recent apps view, notifications and settings.
“To access private space, there’s an additional layer of authentication to keep apps secure and away from prying eyes. And for additional privacy, you can choose to hide the existence of private space from view on your phone,” Google says.
Additionally, Google announced that users can now log in with a simple tap to applications that rely on passkeys for authentication.
Android 15 also brings improved fraud and scams protections, hides one-time passwords from notifications, requires additional permissions when sideloading applications, tightens screen sharing controls, and alerts at risk-users if a cellular base station or surveillance tool is recording their location.
On Tuesday, Google also announced the release of patches for 29 vulnerabilities affecting Pixel devices. The security update is rolling out as a 2024-10-05 patch level and includes fixes for the security defects described in the October 2024 Android security bulletin.
Related: Google Hardens Pixel’s Baseband Security Mitigations
Related: Google Now Syncing Passkeys Across Desktop, Android Devices