DEVICE SAFETY GUIDES
Android, set safe
This pass takes about ten minutes. It deletes the number advertisers follow an Android phone by, walks the permissions and trims them to what each app honestly needs, sets Google’s own scanner to watch the phone, makes updates happen on their own, locks the screen properly, and closes the side door that lets programs install from outside the store. Menu names wander a little between makers, and the guide notes the common variants where they matter. The settings themselves are the same.
The advertising ID Permissions Play Protect Updates Lock and lifeline Outside installs The finished list
First, delete the advertising ID
Settings → Privacy → Ads
Step 1. Delete the advertising ID outright
Open Settings, then Privacy, then Ads. Tap Delete Advertising ID and confirm. The advertising ID is the number apps and advertisers use to follow one phone from place to place and build a profile on it. Deleting it does not hide the phone. It hands anyone who asks for the number a row of zeros, and ad personalization has nothing left to attach to. On older phones the same door stands at Settings → Google → Ads. There, choose Delete Advertising ID where it is offered, or turn ON Opt Out of Ads Personalization if that is the line the phone shows.
Second, walk the permissions
Settings → Privacy → Permission Manager
Step 2. Location, Camera, Microphone, and Contacts, one at a time
Open Permission Manager (on some phones it stands at Settings → Apps → App Permissions). It lists what apps may touch, kind by kind. Walk Location, Camera, Microphone, and Contacts. For each app, the honest settings are Allow only while using the app, Ask every time, or Do not allow. Almost nothing needs location set to Always, and a flashlight or a game needs neither your microphone nor your contact list. Trimming a permission does not break the app. It narrows what the app may reach.
Third, set Play Protect to watch
Play Store → profile picture → Play Protect
Step 3. Turn on scanning, and the stronger detection with it
Open the Play Store, tap the profile picture, and open Play Protect. Scan Apps with Play Protect should read ON. Play Protect checks the apps on the phone against what Google knows about harmful software, every day, on its own. Then tap the gear at the top of that screen and turn Improve Harmful App Detection ON as well, so apps from outside the store get a harder look before they run.
Fourth, updates that handle themselves
Play Store → profile picture → Settings → Network Preferences → Auto-Update Apps
Step 4. Apps update on their own
Open Auto-Update Apps and choose Over Wi-Fi Only or Over Any Network. Either choice is safe. What matters is that the choice is not the third one, the one that leaves every app frozen at the version it shipped with.
Settings → System → Software Update
Step 5. And the phone itself stays current
The system update screen changes its name a little from maker to maker, and it stands under System or About Phone on most. Open it, install anything that is waiting, and turn on automatic download where the phone offers it. The fixes in these updates close the doors the scam messages try first.
Fifth, the lock and the lifeline
Settings → Security → Screen Lock
Step 6. A lock the phone asks for right away
Open Screen Lock and set a PIN, pattern, or password the household owner can remember and a stranger could not guess. Then set the phone to lock Immediately when the screen sleeps, on the same screen or the one beside it. A fingerprint or face unlock can ride on top of the PIN for daily ease, and they should carry the owner’s face and fingers only.
Settings → Security → Find My Device
Step 7. Turn on Find My Device before the day it is needed
Open Find My Device and turn it ON. With it on, a lost phone can be found on a map, made to ring even on silent, locked from a distance, or wiped if it is truly gone. On Samsung phones, also look under Settings → Biometrics and Security → Find My Mobile and turn that ON. This is another setting to make on a calm day, not a frantic one.
Sixth, shut the outside door
Settings → Apps → Special App Access → Install Unknown Apps
Step 8. Nothing installs from outside the store
Open Install Unknown Apps. The screen lists which apps are allowed to install other apps from outside the Play Store, a trick scam messages lean on hard, since a link in a text cannot install anything unless some app on the phone is allowed to do it. Every app on the list should read Not Allowed. If one reads Allowed and nobody in the house set it that way on purpose, set it back.
The whole pass, on one list
When the eight steps are done, the phone or tablet should read exactly this.
- Advertising ID reads deleted
- Permissions reads trimmed kind by kind, location on Always for almost nothing
- Play Protect scanning reads ON
- Improve Harmful App Detection reads ON
- Auto-Update Apps reads ON, over Wi-Fi or any network
- System updates reads none waiting
- Screen Lock reads set, locking Immediately
- Find My Device reads ON
- Install Unknown Apps reads Not Allowed, for every app
Published as a public service by Agentic Armor LLC. Menu names follow the maker’s current screens as of October 2026, and an update can rename a line without moving the setting far. The finished list above is the standard to check against. Nothing on this page asks for an account, a payment, or a sign up. More from the house stands with the books and the information releases.