An apparatus for improving terminal security, comprising: a starting module, configured to randomly generate a dynamic password, display the dynamic password on a display interface, and start a voice receiving device; a conversion and extraction module, configured to receive voice information obtained by the voice receiving device when a user reads the dynamic password on the display interface, convert the voice information into a text password, and extract a voiceprint feature of the voice information; and a processing module, configured to: obtain the text password converted by the conversion and extraction module, the voiceprint feature extracted by the conversion and extraction module, and the dynamic password generated by the starting module; and when the text password is the same as the dynamic password, determine terminal usage permission of the user according to the voiceprint feature and a prestored correspondence between terminal usage permission and a voiceprint feature, and set the display interface to an unlocked or locked state according to the determined terminal usage permission; or set the display interface to a locked state when the text password is different from the dynamic password; wherein when the text password is the same as the dynamic password, the processing module is further configured to: when the voiceprint feature extracted by the conversion and extraction module does not exist in the prestored correspondence between the terminal usage permission and the voiceprint feature, determine that the terminal usage permission of the user is control forbiddance, set the display interface to the locked state, and forbid the user to access all content in the terminal; and the processing module is further configured to: receive the voice information obtained by the voice receiving device when the user reads the dynamic password on the display interface, and send terminal location information and the received voice information to a preset contact address; and instruct the owner to remotely destroy a private file in the terminal. a starting module, configured to randomly generate a dynamic password, display the dynamic password on a display interface, and start a voice receiving device; a conversion and extraction module, configured to receive voice information obtained by the voice receiving device when a user reads the dynamic password on the display interface, convert the voice information into a text password, and extract a voiceprint feature of the voice information; and a processing module, configured to: obtain the text password converted by the conversion and extraction module, the voiceprint feature extracted by the conversion and extraction module, and the dynamic password generated by the starting module; and when the text password is the same as the dynamic password, determine terminal usage permission of the user according to the voiceprint feature and a prestored correspondence between terminal usage permission and a voiceprint feature, and set the display interface to an unlocked or locked state according to the determined terminal usage permission; or set the display interface to a locked state when the text password is different from the dynamic password; wherein when the text password is the same as the dynamic password, the processing module is further configured to: when the voiceprint feature extracted by the conversion and extraction module does not exist in the prestored correspondence between the terminal usage permission and the voiceprint feature, determine that the terminal usage permission of the user is control forbiddance, set the display interface to the locked state, and forbid the user to access all content in the terminal; and the processing module is further configured to: receive the voice information obtained by the voice receiving device when the user reads the dynamic password on the display interface, and send terminal location information and the received voice information to a preset contact address; and instruct the owner to remotely destroy a private file in the terminal. when the voiceprint feature extracted by the conversion and extraction module does not exist in the prestored correspondence between the terminal usage permission and the voiceprint feature, determine that the terminal usage permission of the user is control forbiddance, set the display interface to the locked state, and forbid the user to access all content in the terminal; and the processing module is further configured to: receive the voice information obtained by the voice receiving device when the user reads the dynamic password on the display interface, and send terminal location information and the received voice information to a preset contact address; and instruct the owner to remotely destroy a private file in the terminal.