How to secure your mobile phone

Originally, mobile phones served mainly as tools for calls and text messaging. Over the years, advances in technology have expanded their capabilities. Most smartphones now include GPS, cameras, audio and video recording, file sharing, and internet access.

Nevertheless, mobile device security remains important. To help protect your sensitive information from exposure and your phone from unauthorized access, follow the recommendations below.

Common mobile security risks and how to address them

• Calls and messages are not always end-to-end encrypted. For sensitive conversations, use reputable communication apps with end-to-end encryption. A mobile VPN can additionally protect internet traffic between your phone and its server.
• Review your phone for unfamiliar apps and unexpected access to your location, microphone, or camera. These checks can help identify suspicious activity, but they cannot guarantee that your phone is free of tracking software.
• Avoid keeping unnecessary sensitive information on your phone. Store passwords in a reputable password manager rather than in unprotected notes, and back up important files.
• Keep your operating system and apps updated. Enable automatic updates where available, and remove apps you no longer use.

Steps to take if you lose your phone

1. Use Apple’s Find My or Google’s Find My Device to locate the device and mark it as lost or lock it remotely. Set up this feature before the phone goes missing.
2. Inform your mobile service provider and ask them to suspend your SIM or eSIM to prevent unauthorized use.
3. From a trusted device, review your important accounts, revoke the missing phone’s sessions where appropriate, and change passwords if you suspect someone has accessed them. Use the lost-device tools first, as removing account access can affect recovery options.
4. If recovery is unlikely, consider remotely erasing the phone. Make sure you understand the consequences first. For an iPhone, do not remove it from Find My after erasing it, as doing so removes Activation Lock.

Additional precautions:

• Do not leave your unlocked phone with people you do not trust. Unsupervised physical access can make it easier to install spyware or change security settings. Set the phone to lock automatically and use a strong passcode.
• For highly sensitive meetings, follow your organization’s device policy or leave your phone in a secure place outside the room.
• Keep your phone secure when using it in public, and avoid leaving it unattended. Physical control of the device is an important part of protecting its contents.
• Use strong, unique passwords for your accounts and enable two-factor authentication wherever possible.