By default, does Android scan every app you install for malware,
or does Android only scan apps installed from the Google Play Store?
Wolf Greenblatt, 2024-06-02 23:13:
By default, does Android scan every app you install for malware,
or does Android only scan apps installed from the Google Play Store?
That also depends on the device as well since some manufactures modify
the official version of Android to their needs and some provide their
own security solutions like Xiaomi.
However, by default Android will scan every app regardless where it came from.
Also see: Settings -> Security & privacy -> App security -> Play protect
and the the "Play Protect settings" you can open with the settings icon
on the top right. In these settings there is also the following option,
which is enabled by default:
Improve harmful app detection
Send unknown apps to Google for better detection
And "unknown apps" means apps which you did not install using Google
Play but by using an APK file or alternative sources like F-Droid.
On 2024-06-03 14:11, Arno Welzel wrote:[...]
Also see: Settings -> Security & privacy -> App security -> Play protect
and the the "Play Protect settings" you can open with the settings icon
on the top right. In these settings there is also the following option,
which is enabled by default:
Improve harmful app detection
Send unknown apps to Google for better detection
And "unknown apps" means apps which you did not install using Google
Play but by using an APK file or alternative sources like F-Droid.
I assume that applications on the google play server are scanned "by the server", in advance, and other applications are scanned later, dunno if locally or after they are uploaded for scan at the server. Oh, rather
the later: it says "Send unknown apps to Google for better detection"
Carlos E.R., 2024-06-03 15:34:
On 2024-06-03 14:11, Arno Welzel wrote:[...]
Also see: Settings -> Security & privacy -> App security -> Play protect >>> and the the "Play Protect settings" you can open with the settings icon
on the top right. In these settings there is also the following option,
which is enabled by default:
Improve harmful app detection
Send unknown apps to Google for better detection
And "unknown apps" means apps which you did not install using Google
Play but by using an APK file or alternative sources like F-Droid.
I assume that applications on the google play server are scanned "by the
server", in advance, and other applications are scanned later, dunno if
locally or after they are uploaded for scan at the server. Oh, rather
the later: it says "Send unknown apps to Google for better detection"
I assume, Google Play services create some kind of signature for every
app and maintain a catalogue of known signatures of malicious apps and
app versions. Whenever a new app from outside of Google Play is
installed, the check will be, if the signature of that app is already
known and if not, it will be send for verification to the Google Play
servers where it will get scanned and the signature along with the scan result will be stored. So next time the same app package will be
installed by someone else, Google Play already knows the signature and
can warn the user or stop the installation if the app is known to be malicious.
| Sysop: | Keyop |
|---|---|
| Location: | Huddersfield, West Yorkshire, UK |
| Users: | 715 |
| Nodes: | 16 (2 / 14) |
| Uptime: | 153:13:44 |
| Calls: | 12,091 |
| Calls today: | 4 |
| Files: | 15,000 |
| Messages: | 6,517,664 |