- Most phone break-ins exploit weak locks, old software or careless app permissions.
- Twelve settings take about 20 minutes and block the most common attacks.
- Review your checklist every few months, especially after a major update.
Your smartphone is probably the most valuable device you own — not because of its price, but because of what it unlocks. Banking apps, email, photos, work chats and saved passwords all live in one pocket-sized place. This smartphone security checklist walks through twelve settings that dramatically reduce your risk, whether you use Android or iPhone.
Lock the front door
- Use a strong screen lock. A six-digit PIN or longer passcode is far better than a four-digit code or a pattern.
- Turn on biometric unlock for convenience, but keep the passcode strong because it is the fallback.
- Shorten auto-lock to 30 seconds or one minute.
- Hide notification previews on the lock screen so one-time codes and private messages are not visible to anyone nearby.
Keep software current
- Enable automatic system updates. Updates patch security holes that criminals actively exploit.
- Update apps automatically and delete apps you have not opened in months — fewer apps means fewer weak points.
Control what apps can see
- Review permissions for location, camera, microphone, contacts and photos. Choose “while using the app” or “ask every time” where possible.
- Turn off ad personalisation and reset your advertising ID.
Protect your accounts
- Turn on two-factor authentication (2FA) for email, banking and social accounts. An authenticator app is safer than SMS codes.
- Use a password manager so every account has a unique password.
Plan for loss or theft
- Enable Find My Device / Find My iPhone and test that you can locate the phone from a browser.
- Back up automatically. If the phone is lost, a recent backup turns a disaster into an inconvenience. Our comparison of cloud storage vs. external drives helps you choose the right backup plan.
Security is not one big decision — it is a handful of small defaults that quietly protect you every day.
Watch for social engineering
The strongest settings cannot stop you from handing over a code voluntarily. Be suspicious of urgent messages asking you to “verify” an account, click a delivery link or share a one-time password. Banks and reputable companies will never ask for your full PIN or 2FA code. When in doubt, close the message and contact the company through its official app or website. Our guide on spotting reliable information online shares more red flags.
Android and iPhone: where to find these settings
Most of the settings in this checklist live in similar places on both platforms. On iPhone, look under Settings → Face ID & Passcode for lock options, Settings → Privacy & Security for app permissions and Settings → [your name] → Find My for location tracking. On Android, check Settings → Security & privacy for screen lock and updates, Settings → Apps → Permissions for access controls and Find My Device in your Google account. Menu names vary slightly by manufacturer, but searching the settings app for “lock”, “permissions” or “find” usually gets you there in seconds.
Public Wi-Fi and charging stations
Cafés, airports and hotels are convenient but risky. Avoid logging into banking apps on open networks unless you use a trusted VPN or switch to mobile data. Turn off automatic joining of unknown networks so your phone does not connect without asking. Public USB charging points can, in rare cases, be tampered with; carrying your own charger and plugging into a wall socket is the safer habit.
What to do if your phone is lost or stolen
- Use Find My Device to locate, lock or display a message on the phone.
- Change the passwords for email and banking from another device.
- Contact your mobile carrier to suspend the SIM and prevent number theft.
- Erase the device remotely if recovery looks unlikely — your backup protects your data.
A 20-minute security routine you can repeat
Security works best as a short, regular habit. Set a recurring reminder every three months and work through this quick routine. First, install any pending system and app updates, then restart your phone so they take full effect. Next, open your privacy dashboard and review which apps used your location, camera or microphone recently; revoke anything that looks unnecessary. Then check the devices signed in to your email and cloud accounts and sign out of any you do not recognise. Finally, confirm that your latest backup completed successfully and that Find My Device still shows the phone’s location.
This routine also helps you spot warning signs early. Unexpected battery drain, unfamiliar apps, pop-ups outside the browser or accounts you did not create can all indicate a problem. If something looks wrong, change your important passwords from a different device, remove suspicious apps and, if necessary, back up your data and reset the phone to factory settings.
Families can make this a shared activity. Help older relatives and teenagers set up strong locks, two-factor authentication and backups, because their accounts are often targeted by scammers who assume they are less protected. A few minutes together can prevent a stressful recovery later. Keeping everyone’s devices updated and secured protects the whole household, including shared photos, messages and payment methods.
Frequently asked questions
Do I need antivirus on my phone?
Keeping the system updated and installing apps only from official stores protects most users. Security apps can add features, but they are not a substitute for good settings.
Is face unlock secure enough?
Modern face and fingerprint unlock are convenient and reasonably secure, but your passcode remains the master key, so keep it long and private.
How often should I review app permissions?
Every few months and after installing new apps. Remove access that an app does not genuinely need.
Make it a habit
Set a reminder to revisit this list every three months. It takes minutes and keeps your defences current as apps and threats change. For more practical tech guides, browse the Technology section on Domikyo.com.
