The images in this article were generated with artificial intelligence. How we publish
For years, mobile phones have ceased to be a simple communication device to become a portable safe: they contain photos, emails, bank access and digital keys. So, when a thief gets done with a smartphone, the damage is not just material; it can open the door to fraud and suplantations. With that reality in mind, Google has presented a new set of Android improvements aimed at complicating the lives of criminals and facilitating the recovery of lost or stolen devices.
The new ones, which expand the protections announced by the company in October 2024, seek to cover three phases: before, during and after the attempt to remove. You can read the official explanation of the Android security team in its latest release on Google's blog Here. and the prior introduction of these defenses in October 2024 Here..

One of the functions that receives more fine controls is what Google calls Failed Authentication Lock: it is an automatic lock that comes into action after a high number of failed attempts to unlock. So far this was a general protection; now users can activate or deactivate it by a specific switch in the settings. In addition, temporary penalties have been tightened after multiple attempts, making it slower and more expensive for a thief to tantar PINS, patterns or passwords. At the same time, the company has introduced mechanisms to avoid accidental blockades - for example, by curiosity or children - ensuring that certain repeated attempts do not have against the limit of reattempts.
Another important improvement extends Identity Check: this mechanism requires biometric authentication when sensitive actions are carried out outside trusted locations. The novelty is that it now automatically protects any function or application using the Android Biometric Prompt standard, including Google's password manager and third-party banking applications. If you want to consult the technical documentation about Biometric Prompt, Google maintains a reference page for developers on evooper.android.com.
For those who lose the phone, Remote Lock - the tool that allows to block a device from any browser - now incorporates the option to order an additional security challenge before running the lock. This measure seeks to prevent a malicious third party from trying to block a device that does not belong to it. The remote locking function is accessible from android.com / lock, and complements other recovery utilities such as Google's well-known Find My Device page.
Google has also decided to test default settings in specific markets: in Brazil, the new devices activated there will come out with two protections aimed at physical theft enabled by default. One detects "snatch-and-run" situations and blocks the device automatically; the other allows remote locking. It is a sign that manufacturers and services can adjust measures according to local risks and usage habits.
In terms of compatibility, recovery tools that facilitate remote location and lock are available for devices with Android 10 or higher. The most advanced authentication protections, on the other hand, require Android 16 or later versions. Therefore, keeping the operating system up to date remains one of the key recommendations for taking advantage of these improvements.

These updates add to other defenses that Google has been deploying: for example, in recent months, scam protection was extended during calls in certain financial applications in the United States. These are steps that, combined, reduce the lines of attack on the phone and the money or data it contains.
If you have an Android and want to take advantage of these improvements, the practical thing is to check the security options in Settings, activate strong blocks (long PIN or password) and biometrics, and make sure that the remote lock function is configured and linked to your account. Equally important is to protect your Google account with two-step verification and review the recovery and blocking policies that accompany your specific phone model.
In short, the new Android defenses seek to turn the theft of a phone into an operation with less chance of success and more cost to the attacker. They are technical improvements that, well used by people, can make the difference between losing a device and avoiding much greater damage. For more details and for official notes, check the Android security team's writing on Google's blog Here. and the Android page on version 16 in evooper.android.com.
Related
More news on the same subject.

GhostAction Expands Attack: phishing to steal credentials and persistence in VS Code
A group behind the GhostAction campaign - already known for infiltrating GitHub Actions workflows into open source projects - has expanded its arsenal: in addition to installing...

ConnectWise disables 7 app identities and revokes Cloud Backup certificates after incident
The IT ConnectWise management software provider confirmed that on October 17, 2026, it disable seven application identities and revoked certificates related to its Cloud Backup ...

Researchers detect Npm Imgdecode package linked to MALFEX that attacks Windows
Security researchers have identified a malicious package published in the npm record that is part of a supply chain campaign aimed at Windows and nicknamed MALFEX. The package, ...

OpenBSD 7.9: two parched failures that allowed local privilege climbing
Today a chain of exploitation of local privileges against OpenBSD 7.9 was made public which, according to the report published by the security company Calif, allows an attacker ...

OpenAI reveals unaligned IA incidents; a GPT-5.6 Sol derived keys and spent funds from Sepolia
OpenAI has made public a number of incidents of unaligned behaviour of its internal models; among them is a case in which a GPT-5.6 family research model Sol derived private key...

Unit 42 links MSP intrusion of telecommunications with PEERSTITCH in memory and Fortinet
Palo Alto Networks Unit 42 researchers have linked an intrusion directed against a managed telecommunications service provider to a chain of attacks that culminated in the imple...