Mobile Hardening Guide: Difference between revisions

From Irregularpedia
Jump to navigation Jump to search
← Older edit
VisualWikitext
Sac1 (talk | contribs)
110 edits
added links
Tag: Manual revert
 
(13 intermediate revisions by 2 users not shown)
Line 1: Line 1:
<span id="mobile-device-hardening-android-ios"></span>
= Mobile Device Hardening: Android || iOS =
= Mobile Device Hardening: Android || iOS =


Return to [[dfp-guide|DFP Guides]] Ensure the safety and security of your mobile devices with these critical guidelines and recommendations tailored for Android and iOS systems.
Ensure the safety and security of your mobile devices with these critical guidelines and recommendations tailored for Android and iOS systems. Additional resources are available at the [https://github.com/irregularchat/public-resources/tree/main/Checklists DFP Checklists].


See some publicly available [https://github.com/irregularchat/public-resources/tree/main/Checklists DFP Checklists].
There is a larger  [[dfp-guide|DFP Section]] that is broader than just mobile devices


<span id="nsa-mobile-device-best-practices"></span>
== NSA Mobile Device Best Practices ==
== NSA Mobile Device Best Practices ==


[[nsa-mobile-device-best-practices.pdf|Direct Download here]] [[nsa-mobile-device-best-practices2.jpg]]
Download the [[:File:Nsa mobile device best practices.pdf|NSA Mobile Device Best Practices PDF]] for a comprehensive guide. Below are some essential highlights:


[[nsa-mobile-device-best-practices1.jpg]] ## Living By Mobile Security Rules
* '''Keep Applications Updated''': Ensure apps are always up-to-date to mitigate vulnerabilities and benefit from the latest security patches. 
* '''Disable AdTech''': Remove your Advertising ID and disable personalized ads to reduce tracking. 
* '''Use Screen Lock Protection''': Secure your device with passcodes, fingerprint, or facial recognition. 
* '''Lock Individual Apps''': Set additional locks for sensitive apps such as those handling communication and finance. 
* '''Power Cycle Your Device''': Regularly restart your phone to clear out potential vulnerabilities.


= '''Keep Applications Updated''': Ensure all applications are up-to-date, mitigating vulnerabilities and leveraging the latest security patches. =
<pdf>File:Nsa mobile device best practices.pdf</pdf>
= '''AdTech Bad''': Remove your Advertising ID / Personalized Ads from your devices =
= '''Use Screen Lock Protection''': Secure your mobile devices with passcodes, facial recognition, or fingerprint technology to safeguard against unauthorized access. =
= '''Lock Individual Apps''': Further enhance security by setting locks for specific apps, particularly those involving communication, finance, and personal data. =
= Periodically power cycle your device: Turning off and on your device can help vulnerable devices =


<span id="comprehensive-mobile-security-checklist"></span>
== Comprehensive Mobile Security Checklist ==
== Comprehensive Mobile-Security Checklist ==


'' '''Digital Signatures''':
This checklist is designed to help you harden your mobile device security:
''' ☐ Disable unused wireless radios.
''' ☐ Utilize airplane mode frequently.
'''' ☐ Avoid Ad Tech. (Settings and Leaky Apps)
'' '''Passwords''':
''' ☐ Employ strong screen locks (password or pin).
''' ☐ Lock your SIM and acquire the PUK from your carrier.
''' ☐ Enable device encryption.
''' ☐ Use biometrics wisely and prefer non-index fingers.
*'' ☐ Rely on a trusted Password Manager.
'' '''Activity''':
''' ☐ Turn off “Always-On” virtual assistants.
''' ☐ Regularly update the system and apps.
''' ☐ Use airplane mode in vulnerable locations.
''' ☐ Ensure downloads are only from trusted sources.
''' ☐ Avoid public USB chargers; use data blockers.
''' ☐ Use a VPN consistently.
''' ☐ Password-protect vital apps.
''' ☐ Maximize privacy and security in application settings.


<span id="mobile-device-applications-for-enhancing-security-and-privacy"></span>
'''Digital Security''': 
== Mobile Device Applications for Enhancing Security and Privacy ==
* ☑ Disable unused wireless radios. 
* ☑ Use airplane mode when not needed. 
* ☑ Avoid apps and settings that rely heavily on ad tracking.


Enhancing security and privacy is paramount in a world increasingly reliant on mobile devices. Explore the following resources to fortify your mobile device security and privacy, ensuring your data and personal information remain protected.
'''Passwords & Authentication''': 
* ☑ Use strong passwords or pins for screen locks. 
* ☑ Lock your SIM card and obtain the PUK from your carrier. 
* ☑ Enable device encryption. 
* ☑ Use biometrics wisely (prefer non-index fingers). 
* ☑ Use a trusted password manager.


<span id="recommended-applications"></span>
'''Activity & Maintenance''': 
=== Recommended Applications ===
* ☑ Turn off always-on virtual assistants. 
* ☑ Regularly update the OS and apps. 
* ☑ Avoid public USB chargers; use data blockers. 
* ☑ Download apps only from trusted sources. 
* ☑ Use a VPN and enable password protection for vital apps. 
* ☑ Maximize privacy settings in all apps.


= '''Password Managers''' =
== Mobile Applications for Enhancing Security and Privacy ==
#'' Consider Bitwarden or KeePass for robust password management and generation.
= '''Multi-Factor Authentication Apps''' =
#'' Utilize Aegis (Android) or OTP Auth (iOS) to enhance security with two-factor authentication.
= '''Anti-Malware Software''' =
#'' Use Malwarebytes to shield your device from malware and other security threats.
= '''Encryption Tools''' =
#'' Opt for OpenKeychain (Android) or Cryptomator to manage PGP keys and encrypt data before cloud uploading.
= '''VPN Services''' =
#'' Employ MullvadVPN or ProtonVPN for secure browsing.
= '''Secure Communication''' =
#'' Use Signal, Element Messenger, or ProtonMail for encrypted communication.


<span id="additional-applications-for-security-and-privacy"></span>
Here are some recommended applications to strengthen your mobile device's security and privacy:
=== Additional Applications for Security and Privacy ===


<span id="password-management"></span>
=== Side-Loading Apps: Risks and Benefits (Android) ===
==== Password Management ====


'' '''Bitwarden''': Robust password manager available on [https://play.google.com/store/apps/details?id=com.x8bit.bitwarden Android] and [https://apps.apple.com/us/app/bitwarden-password-manager/id1137397744 iOS].
Understand the pros and cons of side-loading apps (installing from non-official sources):
'' '''KeePass''': Secure password management available on [https://play.google.com/store/apps/details?id=keepass2android.keepass2android Android] , [https://strongboxsafe.com/ iOS], and [https://f-droid.org/en/packages/com.android.keepass/ F-Droid].


<span id="two-factor-authentication"></span>
==== Benefits ====
==== Two-Factor Authentication ====
* Access a broader range of apps.
* Use open-source apps for better privacy.


'' '''Aegis''': Enhance security on Android via [https://getaegis.app/ GetAegis] and [https://f-droid.org/en/packages/com.beemdevelopment.aegis/ F-Droid].
==== Risks ====
'' '''2FAS''': For iOS, further information is available on the [https://wiki.irregularchat.com/en/resources/guides/dfp-guide/quick#multi-factor-authentication-mfa official guide].
* Potential exposure to malware.
* May void your device's warranty.


<span id="malware-protection"></span>
=== F-Droid: A Secure Alternative ===
==== Malware Protection ====


'' '''Malwarebytes''': Protect against threats on [https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware Android] and [https://apps.apple.com/us/app/malwarebytes-mobile-security/id1327105431 iOS].
F-Droid is an open-source platform for Android apps that focuses on privacy and security.


<span id="encryption-and-data-protection"></span>
==== Pros ====
==== Encryption and Data Protection ====
* Non-tracking, privacy-first app store.
* Access to open-source apps.


'' '''OpenKeychain''': Manage PGP keys for Android, available on [https://play.google.com/store/apps/details?id=org.sufficientlysecure.keychain Google Play].
==== Cons ====
'' '''Cryptomator''': Encrypt files before cloud uploading, available on [https://play.google.com/store/apps/details?id=org.cryptomator Android] and [https://apps.apple.com/us/app/cryptomator/id953086535 iOS], also on [https://f-droid.org/en/packages/org.cryptomator.lite/ F-Droid].
* Limited selection compared to Google Play.
* Possible compatibility issues on some devices.


<span id="secure-communication"></span>
=== How to Install F-Droid ===
==== Secure Communication ====
# Visit the [https://f-droid.org/en/ official F-Droid website].
# Download the F-Droid APK file.
# Enable installation from unknown sources on your Android device.
# Open the APK file to install F-Droid.
# Browse and install secure, open-source apps.


'' '''Element Messenger''': Secure, decentralized communication available on [https://play.google.com/store/apps/details?id=im.vector.app Android] and [https://apps.apple.com/us/app/element-messenger/id1083446067 iOS], also on [https://f-droid.org/en/packages/im.vector.app/ F-Droid].
For those looking for a Google Play alternative, try the [https://f-droid.org/en/packages/com.aurora.store/ Aurora Store], an open-source frontend to Google Play with privacy in mind.
'' '''ProtonMail''': Encrypted email from Switzerland is available on [https://play.google.com/store/apps/details?id=ch.protonmail.android Android] and [https://apps.apple.com/us/app/protonmail-encrypted-email/id979659905 iOS].


<span id="specialized-tools-for-security"></span>
=== Recommended Mobile Apps for Security and Privacy (Android and iOS) ===
==== Specialized Tools for Security ====


'' '''TrackerControl''' (available on F-Droid): Monitor and control app data collection. Available on [https://f-droid.org/en/packages/net.kollnig.missioncontrol.fdroid/ F-Droid].
==== Password Management ====
'' '''Isolation and Profiles''':
* '''Bitwarden''': Available on [https://play.google.com/store/apps/details?id=com.x8bit.bitwarden Android] and [https://apps.apple.com/us/app/bitwarden-password-manager/id1137397744 iOS].
'''' '''Insular''': Isolate your “Big Brother” apps and clone and run multiple accounts simultaneously, available on [https://f-droid.org/en/packages/com.oasisfeng.island.fdroid/ F-Droid].
* '''KeePass''': Available on [https://play.google.com/store/apps/details?id=keepass2android.keepass2android Android], [https://strongboxsafe.com/ iOS], and [https://f-droid.org/en/packages/com.android.keepass/ F-Droid].


<span id="side-loading-apps-risks-and-benefits"></span>
==== Two-Factor Authentication ====
=== Side-loading Apps: Risks and Benefits ===
* '''Aegis''': Available on [https://getaegis.app/ Android] and [https://f-droid.org/en/packages/com.beemdevelopment.aegis/ F-Droid]. 
* '''2FAS''': More details available on the [https://wiki.irregularchat.com/en/resources/guides/dfp-guide/quick#multi-factor-authentication-mfa official MFA guide].


Side-loading apps or installing apps from non-official platforms carries both risks and benefits. Understanding these aspects is crucial for making informed decisions and maintaining device security.
==== Malware Protection ====
* '''Malwarebytes''': Available on [https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware Android] and [https://apps.apple.com/us/app/malwarebytes-mobile-security/id1327105431 iOS].


<span id="benefits"></span>
==== Encryption and Data Protection ====
==== Benefits ====
* '''OpenKeychain''': Manage PGP keys on [https://play.google.com/store/apps/details?id=org.sufficientlysecure.keychain Android]. 
* '''Cryptomator''': Encrypt files before cloud upload on [https://play.google.com/store/apps/details?id=org.cryptomator Android], [https://apps.apple.com/us/app/cryptomator/id953086535 iOS], and [https://f-droid.org/en/packages/org.cryptomator.lite/ F-Droid].


'' Access to a broader range of apps not available in official stores.
==== Secure Communication ====
'' Can use open-source alternatives to ensure higher privacy standards.
* '''Element Messenger''': Available on [https://play.google.com/store/apps/details?id=im.vector.app Android] and [https://apps.apple.com/us/app/element-messenger/id1083446067 iOS], also on [https://f-droid.org/en/packages/im.vector.app/ F-Droid].
* '''ProtonMail''': Encrypted email service from Switzerland, available on [https://play.google.com/store/apps/details?id=ch.protonmail.android Android] and [https://apps.apple.com/us/app/protonmail-encrypted-email/id979659905 iOS].


<span id="risks"></span>
==== Specialized Tools for Security ====
==== Risks ====
* '''TrackerControl''' (F-Droid): Monitor and control app data collection. 
* '''Insular''': Isolate apps or run multiple accounts on [https://f-droid.org/en/packages/com.oasisfeng.island.fdroid/ F-Droid].


'' Potential exposure to malicious software.
'' May void the device warranty or compromise device security.
<span id="f-droid-a-secure-alternative"></span>
=== F-Droid: A Secure Alternative ===
F-Droid is a secure and open-source platform for Android app downloads. It emphasizes non-tracking, user-friendly approaches ensuring user data protection and privacy.
<span id="pros"></span>
==== Pros: ====
'' Access to open-source Android apps.
'' No tracking or data collection from apps.
<span id="cons"></span>
==== Cons: ====
'' Limited app selection compared to conventional app stores.
* Possible compatibility issues with specific Android devices.
<span id="how-to-install-f-droid"></span>
=== How to Install F-Droid ===


= Visit the [https://f-droid.org/en/ official F-Droid website] from your Android device. =
= Download the F-Droid APK file. =
= Allow your device to install apps from unknown sources in the device settings. =
= Open the APK file on your device to install F-Droid. =
= Use F-Droid to browse and install secure, open-source applications. =


''Similar to F-Droid is [https://f-droid.org/en/packages/com.aurora.store/ Aurora Store] an open-source alternative to the Google Play Store frontend client with privacy and modern design in mind.''
[[Category:Privacy]] 
[[Category:Security]] 
[[Category:Mobile Security]] 
[[Category:DFP Guide]] 
[[Category:Guides]]

Latest revision as of 23:19, 17 October 2024

Mobile Device Hardening: Android || iOS

Ensure the safety and security of your mobile devices with these critical guidelines and recommendations tailored for Android and iOS systems. Additional resources are available at the DFP Checklists.

There is a larger DFP Section that is broader than just mobile devices

NSA Mobile Device Best Practices

Download the NSA Mobile Device Best Practices PDF for a comprehensive guide. Below are some essential highlights:

  • Keep Applications Updated: Ensure apps are always up-to-date to mitigate vulnerabilities and benefit from the latest security patches.
  • Disable AdTech: Remove your Advertising ID and disable personalized ads to reduce tracking.
  • Use Screen Lock Protection: Secure your device with passcodes, fingerprint, or facial recognition.
  • Lock Individual Apps: Set additional locks for sensitive apps such as those handling communication and finance.
  • Power Cycle Your Device: Regularly restart your phone to clear out potential vulnerabilities.

Comprehensive Mobile Security Checklist

This checklist is designed to help you harden your mobile device security:

Digital Security:

  • ☑ Disable unused wireless radios.
  • ☑ Use airplane mode when not needed.
  • ☑ Avoid apps and settings that rely heavily on ad tracking.

Passwords & Authentication:

  • ☑ Use strong passwords or pins for screen locks.
  • ☑ Lock your SIM card and obtain the PUK from your carrier.
  • ☑ Enable device encryption.
  • ☑ Use biometrics wisely (prefer non-index fingers).
  • ☑ Use a trusted password manager.

Activity & Maintenance:

  • ☑ Turn off always-on virtual assistants.
  • ☑ Regularly update the OS and apps.
  • ☑ Avoid public USB chargers; use data blockers.
  • ☑ Download apps only from trusted sources.
  • ☑ Use a VPN and enable password protection for vital apps.
  • ☑ Maximize privacy settings in all apps.

Mobile Applications for Enhancing Security and Privacy

Here are some recommended applications to strengthen your mobile device's security and privacy:

Side-Loading Apps: Risks and Benefits (Android)

Understand the pros and cons of side-loading apps (installing from non-official sources):

Benefits

  • Access a broader range of apps.
  • Use open-source apps for better privacy.

Risks

  • Potential exposure to malware.
  • May void your device's warranty.

F-Droid: A Secure Alternative

F-Droid is an open-source platform for Android apps that focuses on privacy and security.

Pros

  • Non-tracking, privacy-first app store.
  • Access to open-source apps.

Cons

  • Limited selection compared to Google Play.
  • Possible compatibility issues on some devices.

How to Install F-Droid

  1. Visit the official F-Droid website.
  2. Download the F-Droid APK file.
  3. Enable installation from unknown sources on your Android device.
  4. Open the APK file to install F-Droid.
  5. Browse and install secure, open-source apps.

For those looking for a Google Play alternative, try the Aurora Store, an open-source frontend to Google Play with privacy in mind.

Recommended Mobile Apps for Security and Privacy (Android and iOS)

Password Management

Two-Factor Authentication

Malware Protection

Encryption and Data Protection

Secure Communication

  • Element Messenger: Available on Android and iOS, also on F-Droid.
  • ProtonMail: Encrypted email service from Switzerland, available on Android and iOS.

Specialized Tools for Security

  • TrackerControl (F-Droid): Monitor and control app data collection.
  • Insular: Isolate apps or run multiple accounts on F-Droid.
Retrieved from "https://irregularpedia.org/index.php?title=Mobile_Hardening_Guide&oldid=1116"