Modern smartphones contain banking apps, personal photos, messages and other important data, so losing a phone or having accounts hacked can have serious consequences. The outlet Báo Nghệ An has compiled a series of tips on how to configure device protection and reduce risks for users.
First, it is worth strengthening the protection of the lock screen. It is not recommended to use simple PINs or easily guessed passwords. It is better to set a complex access code and, where possible, enable facial recognition or fingerprint unlock. For certain critical apps, particularly banking apps, password managers or messengers, it is sensible to additionally enable private app locking. On some newer Android devices, the Identity Check feature may require biometric authentication before performing sensitive actions.
The second recommendation concerns Google and Apple accounts, which are linked to photos, email, backups and the device’s geolocation. If attackers gain access to them, a large amount of personal information is put at risk. Users are advised to enable two-factor authentication, giving preference to code-generating apps or passkeys rather than SMS alone. In addition, where supported by the operator, it is worth setting an extra security code for the phone number to make unauthorised SIM swapping more difficult.
The third step is to activate enhanced protection modes where necessary, which limit risky actions. On compatible Android devices, Advanced Protection can block the installation of apps from unknown sources, strengthen connection security and prevent dangerous behaviour. The exact set of features depends on the model, operating system version and region, so it is worth reading the manufacturer’s official guidance before switching it on.
The fourth tip is to regularly review app permissions. Not every app needs full access to the camera, microphone, location, contacts or photos. For example, a torch app has no obvious need for contacts, and a game usually does not require precise location. Permissions should be granted only when necessary, and revoked for apps that are unnecessary or have not been used for a long time. Particular attention is advised for the Accessibility permission on Android, as it can give an app extensive capabilities to interact with the device.
The fifth recommendation relates to banking apps: they should only be installed from official sources. There are fake apps that mimic the interface of genuine ones in order to steal logins and transaction data. To reduce the risk, it is worth going to downloads via the bank’s official website, checking the developer’s name and not installing files from unknown sources. You should not rely solely on sponsored search results, the app icon or the number of downloads.
The sixth tip is to set up data backups and the device-finding feature. Backups help restore photos, contacts and other important information in case the phone is lost or damaged. The Find My Device option allows you to locate, lock or remotely wipe data from the device. On Android this is configured in the Google account, on iPhone via iCloud Backup and Find iPhone. At the same time, remote wiping only works when there is a connection, so regular backups remain essential.
The seventh recommendation is to update the operating system and apps in good time. Updates not only add new features but also patch vulnerabilities that hackers can exploit. Delaying updates leaves the device exposed to already known threats. Users are advised to enable automatic updates where appropriate and keep their browser, messengers and financial apps up to date. If the device no longer receives security updates, it is worth considering moving to a newer model.
The eighth tip is to use built-in fraud detection tools. Some smartphones have AI-based features that warn about suspicious calls, messages or malicious links. Users should check which security options are available on their device and activate them. At the same time, automatic alerts cannot detect every scam. If someone demands a password, one-time code or urgent money transfer, you should double-check the information via official channels.
The ninth recommendation is to be careful when using public Wi‑Fi and Bluetooth. Phones can automatically connect to previously used networks, even if they are configured insecurely. It is recommended to disable auto-connect for unnecessary public networks and delete those that are no longer needed. For working with sensitive information, it is better to use mobile data or a trusted VPN, which encrypts traffic, although it does not protect against all types of phishing or malware. As for Bluetooth, it is worth disabling visibility to unknown devices when a connection is not needed and treating unexpected pairing requests with caution.
The tenth tip concerns what to do if a phone is lost or an account is suspected of being compromised. If the device has disappeared, you should use the device-finding service as quickly as possible to lock it or wipe the data if necessary, contact the mobile operator to block the SIM card, and inform the bank if the phone is linked to financial services. At the same time, from another secure device you should change the passwords for key accounts — email, Google or Apple accounts and banking services — and review the history of logins, transactions and changes. If fraud is suspected, you should not follow instructions from unknown individuals, but instead call the bank or institution yourself on its official number to verify the information.
As Báo Nghệ An concludes, robust smartphone protection consists of several layers — from strong passwords and two-factor authentication to controlling app permissions, regular updates and backups. This does not eliminate risks entirely, but it significantly reduces the likelihood of losing accounts and helps limit potential damage.