Mobile Hardening Guide: Difference between revisions

From Irregularpedia
Jump to navigation Jump to search
← Older editNewer edit →
VisualWikitext
Tag: 2017 source edit
added spacing and tried to remove redundant refs
Tag: 2017 source edit
Line 3: Line 3:
Return to [[dfp-guide|DFP Guides]]
Return to [[dfp-guide|DFP Guides]]


Ensure the safety and security of your mobile devices with these critical guidelines and recommendations tailored for Android and iOS systems. You can find additional resources at the [https://github.com/irregularchat/public-resources/tree/main/Checklists DFP Checklists].
Ensure the safety and security of your mobile devices with these critical guidelines and recommendations tailored for Android and iOS systems. Additional resources are available at the [https://github.com/irregularchat/public-resources/tree/main/Checklists DFP Checklists].


== NSA Mobile Device Best Practices ==
== NSA Mobile Device Best Practices ==
Line 9: Line 9:
Download the [[nsa-mobile-device-best-practices.pdf|NSA Mobile Device Best Practices PDF]] for a comprehensive guide. Below are some essential highlights:
Download the [[nsa-mobile-device-best-practices.pdf|NSA Mobile Device Best Practices PDF]] for a comprehensive guide. Below are some essential highlights:


'''Keep Applications Updated''': Ensure apps are always up-to-date to mitigate vulnerabilities and benefit from the latest security patches.   
* '''Keep Applications Updated''': Ensure apps are always up-to-date to mitigate vulnerabilities and benefit from the latest security patches.   
'''Disable AdTech''': Remove your Advertising ID and disable personalized ads to reduce tracking.   
* '''Disable AdTech''': Remove your Advertising ID and disable personalized ads to reduce tracking.   
'''Use Screen Lock Protection''': Secure your device with passcodes, fingerprint, or facial recognition.   
* '''Use Screen Lock Protection''': Secure your device with passcodes, fingerprint, or facial recognition.   
'''Lock Individual Apps''': Set additional locks for sensitive apps such as those handling communication and finance.   
* '''Lock Individual Apps''': Set additional locks for sensitive apps such as those handling communication and finance.   
'''Power Cycle Your Device''': Regularly restart your phone to clear out potential vulnerabilities.
* '''Power Cycle Your Device''': Regularly restart your phone to clear out potential vulnerabilities.


== Comprehensive Mobile Security Checklist ==
== Comprehensive Mobile Security Checklist ==
Line 20: Line 20:


'''Digital Security''':   
'''Digital Security''':   
☑ Disable unused wireless radios.   
* ☑ Disable unused wireless radios.   
☑ Use airplane mode when not needed.   
* ☑ Use airplane mode when not needed.   
☑ Avoid apps and settings that rely heavily on ad tracking.
* ☑ Avoid apps and settings that rely heavily on ad tracking.


'''Passwords & Authentication''':   
'''Passwords & Authentication''':   
☑ Use strong passwords or pins for screen locks.   
* ☑ Use strong passwords or pins for screen locks.   
☑ Lock your SIM card and obtain the PUK from your carrier.   
* ☑ Lock your SIM card and obtain the PUK from your carrier.   
☑ Enable device encryption.   
* ☑ Enable device encryption.   
☑ Use biometrics wisely (prefer non-index fingers).   
* ☑ Use biometrics wisely (prefer non-index fingers).   
☑ Use a trusted password manager.   
* ☑ Use a trusted password manager.   


'''Activity & Maintenance''':   
'''Activity & Maintenance''':   
☑ Turn off always-on virtual assistants.   
* ☑ Turn off always-on virtual assistants.   
☑ Regularly update the OS and apps.   
* ☑ Regularly update the OS and apps.   
☑ Avoid public USB chargers; use data blockers.   
* ☑ Avoid public USB chargers; use data blockers.   
☑ Download apps only from trusted sources.   
* ☑ Download apps only from trusted sources.   
☑ Use a VPN and enable password protection for vital apps.   
* ☑ Use a VPN and enable password protection for vital apps.   
☑ Maximize privacy settings in all apps.
* ☑ Maximize privacy settings in all apps.


== Mobile Applications for Enhancing Security and Privacy ==
== Mobile Applications for Enhancing Security and Privacy ==
Line 45: Line 45:
=== Recommended Applications ===
=== Recommended Applications ===


'''Password Managers'''   
* '''Password Managers'''   
* '''Bitwarden''' or '''KeePass''' for secure password management and generation.
  * '''Bitwarden''' or '''KeePass''' for secure password management and generation.


'''Multi-Factor Authentication (MFA)'''   
* '''Multi-Factor Authentication (MFA)'''   
* '''Aegis''' (Android) or '''OTP Auth''' (iOS) to enhance security with two-factor authentication.
  * '''Aegis''' (Android) or '''OTP Auth''' (iOS) to enhance security with two-factor authentication.


'''Anti-Malware Software'''   
* '''Anti-Malware Software'''   
* '''Malwarebytes''' to protect against malware and other security threats.
  * '''Malwarebytes''' to protect against malware and other security threats.


'''Encryption Tools'''   
* '''Encryption Tools'''   
* '''OpenKeychain''' (Android) or '''Cryptomator''' for encrypted cloud storage and PGP key management.
  * '''OpenKeychain''' (Android) or '''Cryptomator''' for encrypted cloud storage and PGP key management.


'''VPN Services'''   
* '''VPN Services'''   
* '''MullvadVPN''' or '''ProtonVPN''' for secure browsing.
  * '''MullvadVPN''' or '''ProtonVPN''' for secure browsing.


'''Secure Communication'''   
* '''Secure Communication'''   
* '''Signal''', '''Element Messenger''', or '''ProtonMail''' for encrypted messaging and emails.
  * '''Signal''', '''Element Messenger''', or '''ProtonMail''' for encrypted messaging and emails.


=== Additional Applications for Security and Privacy ===
=== Additional Applications for Security and Privacy ===

Revision as of 16:36, 5 October 2024

Mobile Device Hardening: Android || iOS

Return to DFP Guides

Ensure the safety and security of your mobile devices with these critical guidelines and recommendations tailored for Android and iOS systems. Additional resources are available at the DFP Checklists.

NSA Mobile Device Best Practices

Download the NSA Mobile Device Best Practices PDF for a comprehensive guide. Below are some essential highlights:

  • Keep Applications Updated: Ensure apps are always up-to-date to mitigate vulnerabilities and benefit from the latest security patches.
  • Disable AdTech: Remove your Advertising ID and disable personalized ads to reduce tracking.
  • Use Screen Lock Protection: Secure your device with passcodes, fingerprint, or facial recognition.
  • Lock Individual Apps: Set additional locks for sensitive apps such as those handling communication and finance.
  • Power Cycle Your Device: Regularly restart your phone to clear out potential vulnerabilities.

Comprehensive Mobile Security Checklist

This checklist is designed to help you harden your mobile device security:

Digital Security:

  • ☑ Disable unused wireless radios.
  • ☑ Use airplane mode when not needed.
  • ☑ Avoid apps and settings that rely heavily on ad tracking.

Passwords & Authentication:

  • ☑ Use strong passwords or pins for screen locks.
  • ☑ Lock your SIM card and obtain the PUK from your carrier.
  • ☑ Enable device encryption.
  • ☑ Use biometrics wisely (prefer non-index fingers).
  • ☑ Use a trusted password manager.

Activity & Maintenance:

  • ☑ Turn off always-on virtual assistants.
  • ☑ Regularly update the OS and apps.
  • ☑ Avoid public USB chargers; use data blockers.
  • ☑ Download apps only from trusted sources.
  • ☑ Use a VPN and enable password protection for vital apps.
  • ☑ Maximize privacy settings in all apps.

Mobile Applications for Enhancing Security and Privacy

Here are some recommended applications to strengthen your mobile device's security and privacy:

Recommended Applications

  • Password Managers
 * Bitwarden or KeePass for secure password management and generation.
  • Multi-Factor Authentication (MFA)
 * Aegis (Android) or OTP Auth (iOS) to enhance security with two-factor authentication.
  • Anti-Malware Software
 * Malwarebytes to protect against malware and other security threats.
  • Encryption Tools
 * OpenKeychain (Android) or Cryptomator for encrypted cloud storage and PGP key management.
  • VPN Services
 * MullvadVPN or ProtonVPN for secure browsing.
  • Secure Communication
 * Signal, Element Messenger, or ProtonMail for encrypted messaging and emails.

Additional Applications for Security and Privacy

Password Management

Two-Factor Authentication

Malware Protection

Encryption and Data Protection

Secure Communication

  • Element Messenger: Available on Android and iOS, also on F-Droid.
  • ProtonMail: Encrypted email service from Switzerland, available on Android and iOS.

Specialized Tools for Security

  • TrackerControl (F-Droid): Monitor and control app data collection.
  • Insular: Isolate apps or run multiple accounts on F-Droid.

Side-Loading Apps: Risks and Benefits

Understand the pros and cons of side-loading apps (installing from non-official sources):

Benefits

  • Access a broader range of apps.
  • Use open-source apps for better privacy.

Risks

  • Potential exposure to malware.
  • May void your device's warranty.

F-Droid: A Secure Alternative

F-Droid is an open-source platform for Android apps that focuses on privacy and security.

Pros

  • Non-tracking, privacy-first app store.
  • Access to open-source apps.

Cons

  • Limited selection compared to Google Play.
  • Possible compatibility issues on some devices.

How to Install F-Droid

  1. Visit the official F-Droid website.
  2. Download the F-Droid APK file.
  3. Enable installation from unknown sources on your Android device.
  4. Open the APK file to install F-Droid.
  5. Browse and install secure, open-source apps.

For those looking for a Google Play alternative, try the Aurora Store, an open-source frontend to Google Play with privacy in mind.

Retrieved from "https://irregularpedia.org/index.php?title=Mobile_Hardening_Guide&oldid=950"