09/05/2015
Android antivirus apps are useless — here’s what to do instead
It seems like you can’t go a week without one security firm or another producing a statistic illustrating just how much Android malware there is in the wilds of the internet. More often than not, these reports come with a few reminders that the company’s own security suite can protect you from these nasty bits of code, which is true some of the time. However, Android is by its very nature more secure than a desktop computer, so maybe you don’t need these security apps. You’ve probably already got what you need.
>> What you should do to stay safe
Your first line of defense is to simply not mess around with Android’s default security settings. To get Google certification, each and every phone and tablet comes with “Unknown sources” disabled in the security settings. If you want to sideload an APK downloaded from outside Google Play, all you need to do is check that box. Leaving this disabled keeps you safe from virtually all Android malware, because there’s almost none of it in the Play Store.
Verify AppsThere are legitimate reasons to allow unknown sources, though. For example, Amazon’s Appstore client sideloads the apps and games you buy, and many reputable sites re-host official app updates that are rolling out in stages so you don’t have to wait your turn. If you do take advantage of this feature, the first time you do so a box will pop up asking you to allow Google to scan for malicious activity. This is known as Verify Apps and it’s part of Google Play Services on virtually all official Android phones.
Users have been rooting their Android phones ever since the first handsets hit the market, but it’s less common these days, as the platform offers many of the features people used to root in order to acquire. Using rooted Android is basically like running a computer in administrator mode. While it’s possible to run a rooted phone safely, it’s definitely a security risk. Some exploits and malware needs root access to function, and otherwise it’s harmless even if you do somehow install it. If you don’t have a good reason to root your phone or tablet, just don’t open yourself up to that possibility.
Android apps also exist that might not be “malware” per se, but you might not want them on your phone because they snoop through your data. Most people don’t read the permissions for the apps they install, but the Play Store does make all that information available. If you’re worried about privacy, check apps to see if they request things like access to your contacts, SMS sending/receiving, and fine location. If an app has reason to access these modules (like a social networking app), you’re probably fine. If, however, a flashlight app is asking for your contact list, you might want to think again.
