Mobile Hardening Guide

Mobile Device Hardening: Android || iOS

Return to DFP Guides Ensure the safety and security of your mobile devices with these critical guidelines and recommendations tailored for Android and iOS systems.

See some publicly available DFP Checklists.

NSA Mobile Device Best Practices

Direct Download here nsa-mobile-device-best-practices2.jpg

nsa-mobile-device-best-practices1.jpg ## Living By Mobile Security Rules

Periodically power cycle your device: Turning off and on your device can help vulnerable devices

Comprehensive Mobile-Security Checklist

Digital Signatures: ☐ Disable unused wireless radios. ☐ Utilize airplane mode frequently. ' ☐ Avoid Ad Tech. (Settings and Leaky Apps) Passwords: ☐ Employ strong screen locks (password or pin). ☐ Lock your SIM and acquire the PUK from your carrier. ☐ Enable device encryption. ☐ Use biometrics wisely and prefer non-index fingers.

• ☐ Rely on a trusted Password Manager.

Activity: ☐ Turn off “Always-On” virtual assistants. ☐ Regularly update the system and apps. ☐ Use airplane mode in vulnerable locations. ☐ Ensure downloads are only from trusted sources. ☐ Avoid public USB chargers; use data blockers. ☐ Use a VPN consistently. ☐ Password-protect vital apps. ☐ Maximize privacy and security in application settings.

Mobile Device Applications for Enhancing Security and Privacy

Enhancing security and privacy is paramount in a world increasingly reliant on mobile devices. Explore the following resources to fortify your mobile device security and privacy, ensuring your data and personal information remain protected.

Password Managers

1. Consider Bitwarden or KeePass for robust password management and generation.

Multi-Factor Authentication Apps

1. Utilize Aegis (Android) or OTP Auth (iOS) to enhance security with two-factor authentication.

Anti-Malware Software

1. Use Malwarebytes to shield your device from malware and other security threats.

Encryption Tools

1. Opt for OpenKeychain (Android) or Cryptomator to manage PGP keys and encrypt data before cloud uploading.

VPN Services

1. Employ MullvadVPN or ProtonVPN for secure browsing.

Secure Communication

1. Use Signal, Element Messenger, or ProtonMail for encrypted communication.

Additional Applications for Security and Privacy

Password Management

Bitwarden: Robust password manager available on Android and iOS. KeePass: Secure password management available on Android , iOS, and F-Droid.

Two-Factor Authentication

Aegis: Enhance security on Android via GetAegis and F-Droid. 2FAS: For iOS, further information is available on the official guide.

Malware Protection

Malwarebytes: Protect against threats on Android and iOS.

Encryption and Data Protection

OpenKeychain: Manage PGP keys for Android, available on Google Play. Cryptomator: Encrypt files before cloud uploading, available on Android and iOS, also on F-Droid.

Secure Communication

Element Messenger: Secure, decentralized communication available on Android and iOS, also on F-Droid. ProtonMail: Encrypted email from Switzerland is available on Android and iOS.

Specialized Tools for Security

TrackerControl (available on F-Droid): Monitor and control app data collection. Available on F-Droid. Isolation and Profiles: ' Insular: Isolate your “Big Brother” apps and clone and run multiple accounts simultaneously, available on F-Droid.

Side-loading Apps: Risks and Benefits

Side-loading apps or installing apps from non-official platforms carries both risks and benefits. Understanding these aspects is crucial for making informed decisions and maintaining device security.

Benefits

Access to a broader range of apps not available in official stores. Can use open-source alternatives to ensure higher privacy standards.

Risks

Potential exposure to malicious software. May void the device warranty or compromise device security.

F-Droid: A Secure Alternative

F-Droid is a secure and open-source platform for Android app downloads. It emphasizes non-tracking, user-friendly approaches ensuring user data protection and privacy.

Pros:

Access to open-source Android apps. No tracking or data collection from apps.

Cons:

Limited app selection compared to conventional app stores.

• Possible compatibility issues with specific Android devices.

Use F-Droid to browse and install secure, open-source applications.

Similar to F-Droid is Aurora Store an open-source alternative to the Google Play Store frontend client with privacy and modern design in mind.