Google is expanding Android’s theft protection framework with a new set of security upgrades aimed at reducing financial fraud and data theft, as the company prepares for the rollout of Android 16.
The enhancements build on Google’s theft protection programme introduced in 2024 and currently available on devices running Android 10 and later. The latest changes focus on strengthening device lock mechanisms, expanding biometric protection, and improving recovery tools for stolen phones.
A key update involves Failed Authentication Lock, first introduced in Android 15, which automatically locks a device after multiple incorrect login attempts. With Android 16, the feature will gain dedicated on-and-off controls in the settings menu, giving users greater flexibility in managing device security.
Google is also expanding Identity Check, extending biometric verification to all apps and services that use the Android Biometric Prompt, including banking applications and Google’s password manager. The move is designed to prevent unauthorised access to sensitive financial and personal information.
In addition, Android will now impose longer lockout periods following repeated failed PIN or password attempts, adding an extra layer of defence against brute-force attacks. Devices running Android 10 and newer will also benefit from improved recovery tools, the company said.
Remote Lock remains a central feature of the theft protection system. Accessible through android.com/lock, the tool allows users to lock a stolen device from any web browser. Google is now adding an optional security question, aimed at ensuring that only verified owners can activate the remote lock.
Separately, Google announced a regional rollout in Brazil, where Remote Lock and Theft Detection Lock will be enabled by default on all newly sold and activated Android devices, providing automatic protection from first use.
The updates reflect Google’s broader effort to strengthen mobile security as smartphones increasingly serve as gateways to digital payments, personal data and online identities.
