Loading page
About this tool
A weighted Android security checklist filtered to your Android version and threat profile, with patch-level freshness and a hardening score.
Android Hardening Checklist filters roughly three dozen concrete Android security settings to the version you are actually running and the situation the phone is used in, then weights each one by how much risk it removes to produce a hardening score. Items are tagged with the Android release that introduced them — lockdown mode in Android 9, the 2G switch and privacy dashboard in Android 12, restricted settings in Android 13, Private Space and theft detection in Android 15, Advanced Protection in Android 16 — so nothing sends you looking for a menu that does not exist. It also grades your security patch level against Android's monthly bulletin cycle.
Open Android Hardening Checklist on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Every item shows the Android release it arrived in, and settings your version does not have are listed separately rather than silently.
A SIM PIN and account two-factor outrank Quick Share visibility, and the score reflects that.
Enter the security patch date and it converts to how many monthly bulletins you are behind.
Settings, then Security & privacy, then System & updates, then Security update — the date shown there is your actual patch level. Android publishes a security bulletin every month, so a patch date more than about 90 days old means several bulletins have been missed, and the Android version number on its own tells you nothing about which fixes you have.
They protect against different things. A fingerprint is faster and encourages you to keep a strong PIN behind it, but the PIN is the actual key — a four-digit PIN has 10,000 combinations against a million for six digits. Lockdown mode, on the power menu since Android 9, disables biometrics and Smart Lock until the PIN is entered, which is the control worth knowing about.
Look in three places: Settings then Accessibility then Downloaded apps, Settings then Security & privacy then More security settings then Device admin apps, and Settings then Apps then Special app access then Install unknown apps. Monitoring apps need accessibility access to read the screen and often register as device admins to resist removal, so anything unfamiliar in those lists deserves investigation. If you may be at risk from someone with physical access, seek support from a specialist organisation before changing settings, since sudden changes can be noticed.
If your carrier no longer needs it, yes. 2G has no mutual authentication and weak or absent encryption, which is exactly what cell-site simulators rely on by forcing a downgrade from a modern network. Android 12 added a per-SIM Allow 2G switch under Network & internet. Some regions still use 2G for emergency calling fallback, and Android keeps emergency calls working regardless of the setting.