The images in this article were generated with artificial intelligence. How we publish
For years, mobile phones have ceased to be a simple communication device to become a portable safe: they contain photos, emails, bank access and digital keys. So, when a thief gets done with a smartphone, the damage is not just material; it can open the door to fraud and suplantations. With that reality in mind, Google has presented a new set of Android improvements aimed at complicating the lives of criminals and facilitating the recovery of lost or stolen devices.
The new ones, which expand the protections announced by the company in October 2024, seek to cover three phases: before, during and after the attempt to remove. You can read the official explanation of the Android security team in its latest release on Google's blog Here. and the prior introduction of these defenses in October 2024 Here..

One of the functions that receives more fine controls is what Google calls Failed Authentication Lock: it is an automatic lock that comes into action after a high number of failed attempts to unlock. So far this was a general protection; now users can activate or deactivate it by a specific switch in the settings. In addition, temporary penalties have been tightened after multiple attempts, making it slower and more expensive for a thief to tantar PINS, patterns or passwords. At the same time, the company has introduced mechanisms to avoid accidental blockades - for example, by curiosity or children - ensuring that certain repeated attempts do not have against the limit of reattempts.
Another important improvement extends Identity Check: this mechanism requires biometric authentication when sensitive actions are carried out outside trusted locations. The novelty is that it now automatically protects any function or application using the Android Biometric Prompt standard, including Google's password manager and third-party banking applications. If you want to consult the technical documentation about Biometric Prompt, Google maintains a reference page for developers on evooper.android.com.
For those who lose the phone, Remote Lock - the tool that allows to block a device from any browser - now incorporates the option to order an additional security challenge before running the lock. This measure seeks to prevent a malicious third party from trying to block a device that does not belong to it. The remote locking function is accessible from android.com / lock, and complements other recovery utilities such as Google's well-known Find My Device page.
Google has also decided to test default settings in specific markets: in Brazil, the new devices activated there will come out with two protections aimed at physical theft enabled by default. One detects "snatch-and-run" situations and blocks the device automatically; the other allows remote locking. It is a sign that manufacturers and services can adjust measures according to local risks and usage habits.
In terms of compatibility, recovery tools that facilitate remote location and lock are available for devices with Android 10 or higher. The most advanced authentication protections, on the other hand, require Android 16 or later versions. Therefore, keeping the operating system up to date remains one of the key recommendations for taking advantage of these improvements.

These updates add to other defenses that Google has been deploying: for example, in recent months, scam protection was extended during calls in certain financial applications in the United States. These are steps that, combined, reduce the lines of attack on the phone and the money or data it contains.
If you have an Android and want to take advantage of these improvements, the practical thing is to check the security options in Settings, activate strong blocks (long PIN or password) and biometrics, and make sure that the remote lock function is configured and linked to your account. Equally important is to protect your Google account with two-step verification and review the recovery and blocking policies that accompany your specific phone model.
In short, the new Android defenses seek to turn the theft of a phone into an operation with less chance of success and more cost to the attacker. They are technical improvements that, well used by people, can make the difference between losing a device and avoiding much greater damage. For more details and for official notes, check the Android security team's writing on Google's blog Here. and the Android page on version 16 in evooper.android.com.
Related
More news on the same subject.

Anonymous MousKIT phishing platform identified to remove Activation Lock on iPhone and iPad
Cybersecurity researchers have documented a phishing platform as a service aimed at eliminating the protection of Activation Lock from stolen iPhones and iPads, combining forged...

United States U.S. imposes sanctions on Iranian networks linked to MOIS and Mabna in the Economic Outcast operation
The U.S. Treasury Department has launched a new round of financial sanctions against networks linked to Iran, in a campaign that the U.S. authorities describe as a coordinated e...

NemoClaw operating chain exposes Olama to unauthenticated access and alters chat templates
What has happened (confirmed facts): Oasis Security researchers have published a report describing a chain of exploitation against the NemoClaw configuration that can allow a we...

CISA adds CVE-2026-21962 to KEV by remote operation in Oracle HTTP Server and WebLogic
The United States Agency for Cybersecurity and Infrastructure (CISA) has included in its catalogue Known Exploited Vulnerabilities (KEV) the critical failure traced as CVE-2026-...

IA in code generation accelerates OSS dependencies and generates security mediation debt
A recent seminar organized by ActiveState and a survey of 300 security and development leaders in companies in different sectors confirms something that many teams already notic...

They identify WordlistLoader and SynkLoader, intermediate loaders linked to access brokers for
Cybersecurity researchers have identified two new malware families - called WordlistLoader and SynkLoader - used as intermediate stages to deploy later loads and, according to p...

TikTok will pay 400 million for COPPA; 100 M subject to annulment of decree Musical.ly
The U.S. Department of Justice. United States announced payment of $400 million by TikTok to resolve a 2024 lawsuit that accused the platform - owned by ByteDance - of violating...