The New Security Enhancements in Android M

With Google releasing Android 6.0 codenamed “Marshmallow” on 29th September 2015 for its Nexus devices, new improvements have been implemented in this version on many aspects such as power management, security and usability. In this article, we browse the most important new features regarding security in Android M and how to use them properly.

App permissions

One of the most important new features in Android M is the finest granularity of setting the app permissions. Earlier versions of Android ask you when you run an app for the first time if you agree to grant the app a list of permissions. In Android M, you can enable or disable individual permissions per app anytime you want. For example, if you want to prevent Google Fit apps from accessing your contacts you can simply go to Settings → Apps → Fit → Permissions and turn off Contacts as an individual permission. This feature enables you to have full control over the apps and their individual permissions.

App Permission

Modifying individual permissions for Google Fit App Photo Taken By: i fix screens

Fingerprint API

Another great feature provided in Android Marshmallow is the fingerprint API. The new fingerprint support is implemented in the Android system itself. This means, you don’t have to use additional third-party apps for that (manufacturer-independent). To use this feature, of course you need to have a fingerprint scanner in your phone. Many devices have fingerprint scanners such as Nexus 6P and Nexus 5X. The Android Pay service is an example of a service that relies mainly on fingerprint authentication. Having support for fingerprint scanning in the Android OS is largely moving mobile security to another level.

Encryption

Google has made full-disk encryption mandatory for new devices (such as Nexus 5X and Nexus 6P). However, devices which run earlier versions of Android and then upgrade to Marshmallow will have the option to either encrypt the phone or sensa 138 not. Devices with low performance are exempted from mandatory encryption. Phone encryption means using a 128-bit AES key to encrypt your accounts, settings, apps and their data, media and all files on the device. When your screen is locked, all your data is encrypted. When you unlock your screen, your data is decrypted. This obviously needs high performance power and that’s why Google is making it mandatory for only high processing power devices. Marshmallow checks your boot sequence to see if there’s any potentially harmful software every time your encrypted phone boots.

Encrypt Phone

Phone encryption in Android M Taken By: i Fix Screens

Smart Lock

The new smart lock feature is used to unlock your device when it’s safe with you. For example, you can unlock your phone using your smartwatch if you add your smartwatch to trusted devices. You can unlock your phone when you’re at home using trusted places. You can do the same using trusted face, voice and on-body detection. All these smart lock methods are implemented to make sure your phone is in safe hands.

Smart Lock

Smart Lock settings screen in Android M Taken By: i Fix Screens

Generally speaking, Google has done a good step regarding security in its latest version of Android. However, it can be considered only one step and there is still a lot to do in this continuously advancing field.

My name is Khaled M. Attia, I am a TA at Computer & Systems Engineering, I like writing blogs on my free time, and now I work as a part time blogger for i Fix Screens .