Your Smartphone is the digital equivalent of your best friend. It contains your photos, knows your secrets and even remembers all your passwords. Smartphone security probably won’t reach the top of your most thrilling topics list, but I can promise you, it’s a big deal. Digital goblins are always lurking, just waiting for you to slip up. In this article we’ll provide you an understanding of basic smartphone security, share some common threats, and discuss ways to safeguard yourself without needing a degree in computer science.
- The “Celebrity Photo Leak” – Last year a celebrity fell victim to a phishing scam when hackers sent them a fake email claiming to be from one of their fellow entertainers. This scam unlocked the door to the celebrities smartphone and the cyber attackers accessed the celebrities private photos and then leaked them online, causing the celebrity immense personal and professional damage.
- The “Wi-Fi Bank Account Hack” – A man sitting in a coffee shop in New York used the coffee shop’s public Wi-Fi network to log in to his bank account. Cybercriminals monitoring this public Wi-Fi connection intercepted the man’s login credentials and gained unauthorized access to his account. In a matter of minutes these thieves stole $15,000 from his account.
- The “Ransomware Attack” – A small business owner downloaded what appeared to be a mobile invoice application for his smartphone, but what actually downloaded was ransomware. This ransomware enabled the digital thief to lock the business owner from using their phone and demanded the business owner pay them $500 in cryptocurrency to unlock access to the phone.
Scary, right? These aren’t just hypothetical scenarios. These events happen ever day to ordinary people who fail to follow basic security practices. Here are some of the most common smartphone security mistakes that people make.
- Ignoring Software Updates – Since software updates take time and often restrict you from using the device while it’s being updated, we tend to postpone the actual update to a more convenient time. Unfortunately, updates often include critical security patches that protect your smartphone against new threats. Delaying the updates may not appear as a big deal, but these delays do increase your risks of having a security event.
- Using Weak Passwords – Reusing passwords or using simple passwords like “123456” increase your risks. Creating strong passwords or using a Password Manager are best practice actions to take to protect information on your mobile device. See our article on Password Security for more detailed information on securing your passwords.
- Downloading Apps from Untrusted Sources – downloading smartphone apps from might result in malware or spyware being installed on your device. Always stick to trusted smartphone app stores such as Google Play or Apple’s App Store. These app stores employ a range of security measures to protect you from downloading malicious apps. Their reviews not only focus on security, but also privacy and content quality.
Physical Security…
- Be Mindful in Public – Be aware of your surroundings while using your smartphone in public locations. When you are in crowded places is a good practice to shield your screens, especially when entering your passwords.
- Enable Auto-Lock – Turning on the auto-lock feature on the phone is a security best practice. This feature will secure your phone after a short period of inactivity. So, in case you leave your smartphone unattended, or in the event you lose it, your device will be auto-locked and your information will be protected from unauthorized access.
- Use a Strong Lock Screen Method – to access information on your smartphone when it’s locked, you’ll need to setup a PIN, password, or biometric authentication method (like fingerprint or facial recognition) to unlock the device. We suggest setting up at least two methods.
Network Security…
- Turn Off Bluetooth and Wi-Fi When Not in Use – this precaution will prevent unauthorized access of your smartphone.
- Avoid Public Wi-Fi Connections – using your smartphone with unsecured public wi-fi networks available in crowded places creates a substantial security risks. If you need to connect to the internet try using your mobile data link or a virtual private network (VPN). Using these options will make your internet connection more private, hide your location, and encrypt the transmission of your data to keep it safe from prying eyes.
- Be Wary of Links and Attachments – if your on your computer you can hover your mouse pointer over a link to verify whether clicking on the link is safe. Unfortunately, this capability doesn’t exist on smartphones. Be very cautious with accessing links and/or attachments on your smartphone even if they appear to come from someone you know. If the links in an email or message look suspicious, don’t click on them! Try to find another way to verify their valid.
Application and Data Security…
- Make Regular Backups of Your Data – imagine how painful it would be if your smartphone was reset to the state it was in when you obtained it. Scary, right? That’s why it’s extremely important to backup the personal information (photos, contacts, etc.) on your phone to another storage option. The most common backups used are cloud services and external disk drives. Making regular backups of your data will ensure you don’t lose your important information in case your smartphone is hacked, lost or damaged.
- Enable MFA (Multi-Factor Authentication) – MFA adds an extra layer of security by requiring two or more distinct authentication factors such as passwords, one-time codes, biometrics (fingerprint, facial recognition), or security keys are used to authenticate your identity. Should someone be able to obtain your password, the entry of an additional authentication factor makes it much more difficult for a hacker to break into your device.
- Review Application Permissions – for additional protection of your data consider restricting what your apps have access to. When you’ve installed a mobile app, you’ve probably noticed a pop-up during the install process indicating the app wants access to your contacts, your location, your photos, your camera, etc.. Limiting what these apps can access on your smartphone will help to reduce your privacy risks.
Smartphone security is all about building good habits. It might seem daunting at first, but like brushing your teeth, a little effort every day goes a long way. Stay vigilant and stay safe.