Skip to content
FIN-CSIRT
RS

FIN-CSIRT / Search

What are you looking for?

Start typing to see results.
    Report an incident

    FIN-CSIRT / Practical lesson

    Set up protection on your Android phone

    Follow the section for your task. Menu locations vary by manufacturer; use the feature names to find the relevant controls.

    Users of personal Android phones with Google servicesAbout 6 minutes of reading + 3 questions
    Start with the example Is your phone already missing?

    What you will learn

    • Check updates and saved data.
    • Find the missing-phone feature.
    • Prepare accounts and backups before a factory reset.

    Practice example

    Backup is enabled but not finished

    Device backup
    Backup is enabled but not finished

    You are about to erase the phone. Backup is enabled in settings, but there is no confirmation that the latest data has been saved.

    Schematic practice example, not a screen from a specific manufacturer.
    Show the example explanation
    Enabled does not mean completed
    Inspect backup status and contents before erasing.
    Apps have different backup arrangements
    Photos, chats and authenticator apps may need separate checks.
    Erasing removes local data
    First establish access to data and accounts from another device.

    Before you start

    This guide covers Android with Google services. If a path differs, search device settings for the feature name. A factory reset erases data; resetting network settings is a different operation. For a phone without Google services, use its manufacturer’s support.

    Contact IT for a work phone. If you see active remote control or a ransom demand, follow the urgent device steps first. Do not reconnect it just to update or make a backup.

    Check for updates

    For routine maintenance, check your important backups and charge the battery before installation.

    1. Open Settings → System → Software updates. Some phones have a separate Software update entry.
    2. Run the offered update check and installation for your device.
    3. Complete a restart if requested.
    4. Under About phone → Android version, review the version and security-update date.

    No update offered means none is currently available for that device. For an older model, ask the manufacturer whether it still receives security fixes.

    In Google Play Store, tap your profile, then Play Protect, and review its status. Keep Scan apps with Play Protect enabled in its settings. Protection reduces risk but does not establish that every app is harmless.

    Create and check a backup

    1. Open Settings → Google → All services → Backup, possibly grouped under Backup and restore.
    2. Check which Google Account stores the backup.
    3. Choose Back up now and wait for completion.
    4. Review the status and types of data saved.
    5. Separately check important photos, chats and sign-in verification apps.

    Not every app supports restoring all its data. Before moving phones, check you can open important backed-up photos and documents. Use the phone-change checks for codes and accounts.

    Prepare to locate your phone

    Search settings for Find Hub, called Find My Device on some older versions. Review the Google Account, permission to locate the device and available offline-finding options. Set a PIN or password screen lock if you do not have one.

    From another trusted device, enter android.com/find and check the phone appears. This tests readiness; do not test by erasing it.

    If your phone is missing

    1. On another trusted device, open android.com/find and sign in to the missing phone’s Google Account.
    2. Select that phone from the list.
    3. Choose Mark as lost and complete the offered locking steps. Play sound can help when looking nearby.
    4. Contact the carrier to protect the SIM and the bank if banking access is at risk.

    Remote commands depend on the phone’s state and connectivity. Do not assume locking has completed until confirmed. Report suspected theft to police; do not go to the map location yourself.

    Factory reset permanently erases data; Find Hub then stops providing the device’s location. Erasure may not cover an SD card. Review the consequences and existing backups before confirming. You may need the phone’s Google Account password to use it if you later find it.

    Before erasing or selling

    Use this procedure when the phone is in your possession and you intend to erase it. First check backups, sign-in on the new device and the handoff preparation guide. If you just reset the Google password, Google recommends waiting 24 hours before a factory reset.

    For sale, remove your accounts through settings following the manufacturer’s procedure so the phone is not left tied to its previous owner. Find Factory data reset or Erase all data in settings. Read what will be removed before the final confirmation. Resetting networking is not erasing the phone.

    When finished, check the new-user setup screen and remove physical SIM and memory cards. Check eSIM transfer with your carrier. If the device requests your account as the previous owner, finish the official procedure before handoff; do not give the buyer your password.

    Check your knowledge · 3

    Your turn to choose the next step.

    Choose one answer for each question shown. More complex lessons select three questions from a wider question bank when the lesson loads.

    Questions and explanations are also available without JavaScript.

    Backup is enabled. Does that confirm every app has saved its data?

    Why does this matter? Android backup does not necessarily include all data from every app.

    1. Yes, the enabled switch is enough.

      A setting does not establish completion or coverage.

    2. No; check backup status and important apps separately.Correct answer

      This checks data you could otherwise lose.

    3. Yes, if the battery is full.

      Battery level does not prove a backup exists.

    Your phone is missing. What does a remote factory reset do?

    Why does this matter? Erasing differs from marking a device as lost and affects data and locating it.

    1. Only silences the ringtone.

      Sound controls are separate.

    2. Creates a new backup of all data.

      Erasing cannot replace a backup that was never made.

    3. Erases data; its location then becomes unavailable in Find Hub.Correct answer

      Check the selected device, backups and warning before confirming.

    You can see active remote control on the phone. What comes first?

    Why does this matter? Active control can expose newly entered data and connected backups.

    1. Disconnect networking and protect accounts from another device.Correct answer

      This limits active access and separates account recovery from the suspect phone.

    2. Connect a backup drive.

      This could expose the backup too.

    3. Enter a new banking password on the same phone.

      The person controlling the phone could see the new password.

    No registration. Your answers are not sent; the result is just for you.

    Check recovery before erasing

    Confirm important backups and Google Account access before erasing your old phone.

    Review Google Account protection too

    References

    Sources and further reading

    Google also explains device ownership protection and removing that protection before handoff.

    Google documents Android updates, Play Protect, factory-reset preparation, backups, Find Hub preparation and missing-device actions. These cover Google features; menu arrangements and handoff procedures also depend on the manufacturer.

    Content last reviewed