Harden your own phone
Go through your phone's settings against Lesson 10B: screen lock, encryption, app sources, location, Bluetooth and NFC.
Environment
Your own Android or iOS phone.
Before you start
- Read Mobile Hardening Techniques (p.267), Location Services (p.270) and Bluetooth Connection Methods (p.274).
You will
- Check lock screen and encryption
- Review app permissions
- Reduce wireless and location exposure
Steps
-
1
Set a strong screen lock (6+ digit PIN or passphrase plus biometrics) and a short auto-lock time.
-
2
Confirm device encryption is on. It is on by default on modern iOS and Android once a lock is set; look under Security settings.
-
3
Check that only the official app store is allowed. On Android, make sure 'Install unknown apps' is off for every app.
-
4
Review app permissions for location, camera and microphone, and remove any that aren't needed.
-
5
Turn off Bluetooth and NFC when you're not using them, and review your paired devices.
-
6
Turn on remote find/lock/wipe (Find My / Find My Device) and test that you can see the device online.
-
7
Install any pending OS updates.
Check your understanding
- ?Why does sideloading increase risk (see p.223)?
- ?How does GPS tagging in photos leak information?
- ?Which of these settings would an MDM enforce on a company device?