Google Enhances Android Advanced Protection with Device-Level Security Features

At the Android Show ahead of Google I/O 2025, Google unveiled significant enhancements to its Advanced Protection program with the upcoming Android 16 release. This program is tailored to protect high-risk users such as politicians, journalists, and public figures from sophisticated digital threats by adding device-specific security features.

Key new features include a novel method for storing device logs that are accessible only by the user, enhancing privacy and security. These logs are encrypted end-to-end and stored securely in the cloud, enabling detailed threat analysis if device compromise is suspected.

Additional protections include spam call filtering and USB port security that restricts new USB connections to charging-only mode when the device is locked, preventing unauthorized data access or malware injection via USB.

To further safeguard devices, Android 16 will automatically restart devices that remain locked for 72 consecutive hours, reducing risks from persistent malware or unauthorized access attempts during extended inactivity.

Moreover, the system will prevent automatic reconnection to unsecured Wi-Fi networks for devices enrolled in Advanced Protection, bolstering network security and reducing exposure to potential man-in-the-middle attacks.

A standout addition is the private on-device processing of phone conversations to detect potential scam calls in real time, a feature initially launched on Pixel phones and now extended to all Advanced Protection users. This proactive scam detection helps prevent fraud and enhances user safety.

Broader Implications for Mobile Security

These enhancements reflect Google's commitment to advancing mobile security for vulnerable user groups by integrating device-level protections that complement existing account-based defenses. The encrypted log storage and intrusion detection capabilities provide a powerful toolset for forensic analysis and incident response, crucial in today’s threat landscape.

By limiting USB data access and enforcing secure network connections, Google reduces attack vectors commonly exploited by adversaries. The automatic restart feature ensures devices do not remain in vulnerable states for extended periods, while scam detection enhances user trust and safety during communications.

Together, these updates position Android’s Advanced Protection program as a leading example of comprehensive mobile security tailored for high-risk individuals, setting a benchmark for future security innovations in the mobile ecosystem.