It’s now inevitable that Android 16 will further enhance the security and safety of Android phones, with June’s release adding more critical updates to those we’ve seen from Android 15. Google is on a mission to close this gap to iPhone, as the latest update to leak from pre-release code makes clear.
According to Android Authority, its latest “teardown of the Google Play Services app” suggests Google is “stealing” an excellent iOS security feature for Android 16. The team says it “discovered a reference to an inactivity reboot feature,” which hard restarts a device into its more secure, inactive mode when it hasn’t been used for a few days.
This will be painted as a theft protection feature and it is, but it’s actually much more critical than that. This is about forensic tools exploiting new vulnerabilities in Androids and iPhones to extract data — sometimes remotely, but usually physically. If a third-party has your phone in their hands and plugs in a cable, you want a data lockdown.
From reviewing the APK code, Android Authority suggests this new update forms part of Google’s Android Advanced Protection Mode, which is the device-side extension its Advanced Protection Program, which better secures accounts and data.
With this new feature enabled, an Android phone will be restarted if unused for three days, reverting to its locked down state before an initial unlock on reboot. Most thieves hard reset phones as fast as they can, to stand a better chance of disabling tracking. And most new high-end phones are now stolen for parts. But a device in forensic hands, especially law enforcement, is more likely to be left on a shelf powered on. Apple’s update made headlines specifically because of the issue for law enforcement.
It is likely all risky connectivity will be disabled, including insecure wireless networks and more critically the phone’s USB data port. Some of these same protections are now in place even for powered-on phones, with Samsung in particular locking down phone connectivity with its Maximum Restrictions and One UI 7 upgrades.
Whatever its intent, this is a welcome move. Forensic exploits have driven many of the recent zero-day vulnerabilities plaguing Android (and iPhone). As with other recent security upgrades, it’s certain to come to Pixel first, which raises a separate issue. Google’s control of its hardware and software makes it difficult for Samsung to keep pace, as we have seen with the One UI 7 delays. That should finally be resolved this month, but the wider issue around Android’s fragmented ecosystem remains.
