You unwrap your new Google Pixel or Android phone from the box, peel off the crisp retail screen film, and press the power button to turn it on.
From there, Android will immediately nudge you to jump onto the nearest Wi-Fi network to configure the handset.
While connecting right away is standard practice for most people, I take a few extra minutes to lock down security before letting any traffic flow into my phone.
I put together the essential security and privacy toggles to enable before exposing your device and data to the outside world, especially on unfamiliar networks.
Theft Protection
Keep your device and personal data locked down
With theft on the rise, it’s not only about losing valuable devices, but you could also risk your sensitive data, from passwords to apps.
One of the most valuable Android features I’ve always kept on is Theft Protection.
It’s a smart feature that automatically locks an Android device when the algorithm detects unusual movement, such as a thief taking away the handset and running.
It has three components, but Theft Detection Lock is the main tool for protection against theft.
To enable it, open Settings > Security & privacy > Lost device protection > Theft protection.
You can also search Settings for “Theft protection” to go directly to the tool’s hub.
Toggle on Theft Detection Lock, and the protection will happen immediately.
Alternatively, you can also toggle on Offline Device Lock. It’s an extra layer of security for your apps and data on top of Theft Detection Lock.
It will automatically lock your device when it goes offline. To access your device again, you need to enter the password or PIN, bypassing biometrics.
Remote Lock
Lock your handset from any web browser
Remote Lock is an extension of Theft Protection. It’s a classic tool that I’ve grown accustomed to checking on every new phone I have.
I ensure that it’s enabled, since it’s off by default on most Android versions.
When it’s switched on, it lets me remotely lock my device from any computer or another smartphone.
It’s useful for locking a phone or tablet you forgot somewhere and aren’t sure whether it is locked. Even for a heartbeat, it’s always recommended to lock it, as it protects the data inside from anyone.
Go to android.com/lock from any browser, enter your mobile number, or complete a quick security challenge if you set one, and the device locks down.
To confirm Remote Lock is active, go to Settings > Security & privacy > Lost device protection > Theft protection, and check the Remote Lock toggle.
Unknown tracker alerts
Detect rogue Bluetooth tags
Since owning multiple Bluetooth smart tags, I have become familiar with how these tiny devices can be effective in keeping my belongings, and even my pets, in check.
They offer precise tracking down to a meter, which is useful for tracking a lost key or baggage.
But it’s also scary if you’re the one being tracked with these tags.
Android has been supporting anti-tracking and anti-stalking for a few years now, and even better, it supports cross-platform tags like Apple AirTags.
For example, if someone places an AirTag in your vehicle or bag without your knowledge, your Android or Pixel phone can alert you when it detects the tag.
Depending on your Android version and device, this is enabled by default. If not, it’s still good practice to check whether it’s protecting you from unwanted stalking.
Go to Security and privacy > More security and privacy > Unknown tracker alerts.
From this section, you can run a manual check for nearby unknown trackers. When it detects one, it will show you how to access or disable the tracker.
Gboard privacy toggles
Stop feeding your keystrokes and personal text to Google servers
Gboard is an incredible keyboard, offering excellent voice typing and in-app tools like translation.
It’s also the default keyboard for Pixels and most Android devices. What’s also enabled right out of the box is the sharing of your data with Google.
That means every word you type, including sensitive text, is sent to Google’s servers for training and improving Gboard and other services, and even for marketing purposes.
Turning it on may also increase background processes and data usage, so that’s not ideal if you’re on a phone with muted specs or a low data limit.
To access this option, open or use Gboard, and then open Settings from the menu.
You can also go to Settings > System > Keyboard > Keyboard apps > Gboard. Scroll down and tap Privacy.
Turn off all the toggles that you see, including Share usage statistics and Personalize for you.
Network security notifications
Block 2G connections and unsafe networks
Beefing up your security also means adding safety filters, even for mobile networks.
On my Pixel, which is also available on stock Android, there’s a feature called Network notifications.
Technically, if enabled, it alerts you if your device connects to an unsafe or unencrypted network, or if the network is tracking your device or number.
It might be handy when you’re in unfamiliar places or connected to compromised networks.
It’s turned off by default, even on my Pixel 9 Pro XL running on Android 17. To turn it on, go to More security and privacy > Mobile network security.
Samsung One UI doesn’t have an equivalent feature, but it does offer Intelligent Wi-Fi through Detect suspicious networks.
In the same settings, you can also check that Block 2G is enabled.
When enabled, your phone avoids using 2G networks, which have looser security and lack modern protections compared to newer wireless technologies like 4G/LTE and 5G.
Hide passwords when you type
Keep your login credentials safe while in public
Another simple privacy tweak I make right away is turning off visible password previews.
By default, most keyboards briefly highlight and enlarge every individual character you tap inside password entry boxes.
That visual confirmation is fine in private spaces, but it makes shoulder surfing effortless when you log in to accounts on crowded trains or in line at coffee shops.
I always encourage friends and family to turn this setting off on every Android phone and tablet they pick up.
On stock Android and Pixel Launcher, go to Settings > Security & privacy > Privacy controls, then switch off Show passwords for touchscreen.
On Samsung Galaxy devices, navigate to Settings > Security and privacy > More security settings, and turn off the corresponding password toggle.
When disabled, your keyboard displays masked dots from the first keystroke, keeping your login details like passwords out of sight.
Always keep your phone updated
Install security patches the moment they drop
The most fundamental (and easiest) step in hardening any device before exposing it to the open web is the classic update check.
Before downloading my daily apps or browsing the web, I go into system settings to check for the newest system or security patches.
Installing the latest security patch and Google Play system update ensures known exploits, bugs, or flaws are addressed before I log in to sensitive accounts.
This doesn’t require much technical effort, and your first boot-up on Android often prompts for available software updates.
If your device skipped that check, navigate to Settings > System > Software updates, and run a manual check under both System update and Google Play system update.
Google still ships Android with the safety off, so lock it down yourself
Many of these are basic steps, but combined with other tools on your Android device, they can enhance your security and privacy protections.
Since I started enabling these, they’ve given me not only better protection, but also confidence that my device is protected on another level.
It’s wild that, despite Google constantly bragging about Android’s bulletproof security, it still leaves all these essential settings turned off right out of the box.
