Android 16: Advanced Protection will prevent USB-based attacks
Work on Android 16, the big Android release of 2025 continues. Deep dives into beta versions of Android 16 revealed a few security features already, including Identity Check and improved theft protections.
A new security feature called Advanced Protection will also make its debut in Android 16. The feature, which brings Google's Advanced Protection Program to Android devices, locks various features on Android 16 devices in order to improve security.
Up until now, this included disabling 2G access, no sideloading permission for apps, the blocking of WEP connections, and MTE available only for compatible apps.
USB-based attack protection
Another feature of Advanced Protection is that many USB-based attacks are prevented while the mode is active. Android Authority discovered strings in the latest Android 16 build that reveals information about USB protection.
According to the information, USB connections are blocked when the Android device is locked and Advanced Protection is enabled. A test confirmed the functionality, and that already connected USB devices are not disconnected when the screen is locked.
Why this is important: USB devices, like USB keyboards or sticks, may be used in attacks. Many computer users know that they should not insert USB devices from unknown sources into their computers.
On Android, similar attacks may happen when a USB device is connected to an Android device. While many Android users may also be careful when it comes to connecting unknown devices, that is not helping when a phone or tablet gets lost or stolen.
This is the main situation where Advanced Protection kicks in, provided that the Android device is locked and the PIN was not brute forced or guessed.
While data connections are blocked, Android devices continue to be charged via USB, even with the feature enabled and the device locked.
Advanced Protection blocks USB device connections when the phone or tablet is locked. Android users who want to connect a USB device but forgot about the security feature need to disconnect it, unlock the device, and then reconnect the USB device to establish a working connection.
Android Authority uploaded a demo video to YouTube that showcases the new feature on Android 16.
The new Advanced Protection feature will be opt-in. Means, Android users need to enable it before it starts protecting the device actively. It is unclear yet if Android users can enable or disable specific features of Advanced Protection, or if this is an all or nothing security feature.
It remains to be seen how this will work, especially regarding the sideloading protection. Will it affect already installed apps or updates of such apps, or only new installs?
Now You: What is your take on this new security feature? Would you enable Advanced Protection on your devices? Let us know in the comment section below.
Android OS updates to my Moto G82 ceased with Android 13. I knew they would at the time I bought it, but did so to avoid all the AI crap which started with version 14. The phone still receives security updates though and that’s enough for me.
I’m not a phone enthusiast in any event since having to do anything on such a small screen is not my cup of tea at all. If anything, it’s a source of constant amusement to observe individuals on public transport scrolling up and down on their phones looking for.. what exactly? They never seem to find it whatever it is and have a glum look on their faces all the time. I don’t want to join that party.
Neither do I, @TelIV. No smartphone, a basic dumb-phone (no Internet connection) mainly for double authentication and less and less for calling a cab at 3 in the morning for getting back home as in the old days when I’d pass in review all the gals met in American bars and dancing places :)
Concerning protection and when it is signed Google, what always comes to my mind is the mafia syndrome : the price of being protected, the price here being digitally analyzed, tracked, racketeered in fact.
Should I ever switch to a smartphone (I really doubt it) it wouldn’t be one supervised by Android, for sure.
This is why I put all of my phones in a microwave with a lock on it and the cord cut when I’m not using them. /s (or maybe not /s?)
I do not, would not, have anything on my phone that needs that much protection.
Well, hopefully Samsung will actually implement this security feature this time – given they failed to implement the juice-jacking mitigations for ChoiceJacking attacks in Android 15.