How secure is Android?

There's endless discussion of more or less quality about each of these questions, and I suspect anyone can get any answer they want to hear. Using Android without incident since version 2.3, and currently on 8 and 9, my distilled wisdom is:

1. Virtually all reported exploits are from installing malware with bad apps from bad sources. Google's Play Store is about as safe as Apple's App Store, and third party security is not needed if that is the sole source of apps.

2. Android, unlike Apple, permits app install from other sources. If "side loading" apps as APKs or installing from anywhere but Play Store, use a third party security app to scan for and block malware, replicating what the stores do. I currently use BitDefender free for automatic operation at very low resource use, but watch laboratory rankings every year - no brand loyalty is ever deserved.

3. I only really worry about leaving the phone someplace and am much less worried about a hacked Pattern than about never seeing it again. I use a lockscreen message: "REWARD if found: extra-email[at]domain" which is forwarded to my real email. For dead battery, I also keep a small post-it with the Reward message stuck on the back inside the protective case (I worry most of all about dropping the phone, tending to be once or twice a year).

4.  Should make oneself familiar with Google's device finding system.

5. Others differ, but I don't personally like or trust biometric security so don't enable fingerprint or face unlocks.

onlyfreeman wrote:

Does Android have good security, comparable to iOS?

https://outline.com/y2ky7x

Can thieves brute force a pin / pattern lock to steal data? Could this be dependent on brand / model of phone?

https://www.esecurityplanet.com/mobile-security/unlocking-smartphones-pins-patterns-or-fingerprints.html

Any security tips for keep data away from thieves?

2FA

onlyfreeman wrote:

vv50 wrote:

onlyfreeman wrote:

Any security tips for keep data away from thieves?

2FA

Thanks for the links.

I'm not too familiar with 2FA, how does that work in every day use for keeping the data on the phone secure?

it doesn't, it's for securing your online accounts that hold your data.

For example if the phone was in possession of an individual or group, and they were attempting to access the data without any assistance from the owner.

Could 2FA help in this situation and how?

yes, if you had 2fa enabled, then they can't just use passwords saved in your browser to access your accounts without your U2F key or authenticator app PIN.

if you are on Android 9 or later, Lockdown is the feature that is more fit for the particular situation you describe.

onlyfreeman wrote:

Are you aware if this is a Samsung only feature or built into Android?

as mentioned before, Android 9 and above has Lockdown mode.

onlyfreeman wrote:

vv50 wrote:

onlyfreeman wrote:

Are you aware if this is a Samsung only feature or built into Android?

as mentioned before, Android 9 and above has Lockdown mode.

Thanks I'm aware of lockdown mode, however it does not prevent shutdown as far as I know.

from a security standpoint, your phone should be disposable, it's less important than safeguarding your data. if your phone gets stolen, you should wipe it out remotely.

if you need the highest levels of security then enroll in advanced protection program.

onlyfreeman wrote:

Just wondering about security features on modern Android phones, from 2017+, running Android 7+ pre-installed.

Does Android have good security, comparable to iOS?

Well android issue is the device maker usually is slow to roll out O/S updates to their users and will only do it for a year or 2 unlike Apple who makes iOS and the devices so they get updated without lag and for years

Can thieves brute force a pin / pattern lock to steal data? Could this be dependent on brand / model of phone?

Any security tips for keep data away from thieves?

Thanks for any information.

if you are on Android 9 or later, Lockdown is the feature that is more fit for the particular situation you describe.

Forgive my ignorance (just went from Android 7 to Android 10 on a new phone).

What's a lockdown feature? Never heard of it or 2FA, though I've just now briefly read about the later at Wikipedia. Over my head. Sounds similar, but different, than two-step authentication.

Thank you.