[Security Discussion] Archtects:
Table Of Contents

~ Introduction

~ Basic Stuff

Applications

~ Vpn's

~ Antivirus

~ FindmyPhone apps

~ mySecureMail

~ 1Password

~ Signal

~ AppLock

~ Snoopsnitch

~ AFwall+

Firefox Addons

~ Bluhell Firewall

~ CanvasBlocker

~ Clean Links

~ Decentraleyes

~ Disable WebRTC

~ HTTPS everywhere

~ Privacy Badger

~ Procon Latte Content Filter

~ Self Destructing Cookies

// Optional

~ Less Spam please

~ AdBlock Plus

~ Less Spam please

Secure Mail Providers

~ Proton Mail

~ Lavabit

~ HushMail

~ vfemail

A Tad To Paranoid

~ Ipkungfu

~ Snort

Disclaimer I Am Not responsible for the end of the world, your device, your lives or anything else that goes wrong. This is a guide to be more secure on Android.

Introduction

Hello!

This is an attempt to help users who are either very tech savvy or not. While this is a guide and I imagine some might disagree, I will take into consideration complaints or suggestions and I will adjust the post accordingly.

If you know of any apps that are not on my list please inform me I will be happy to adjust the post. (please explain why the app is useful and provide the name of it) while it mostlikly very possible to find everything in this post by searching the web, It might take some time to collate everything so I decided to make a post and put everything down into text.

The point of this guide is to provide several ways to secure your device. You don't need to use it all you can simply cherry pick what you want or use bits.

This is a suggestion Guide if anything. So naturally you can adjust the bellow to your needs.

Finally I'm no security Pro. I am a crazy man who has made himself overly paranoid after some years of learning white hat hacking. If you find something a bit to ridiculous or over the top just ignore it. Nor is it designed to scare you. Just help

Basic Stuff

Lock screen

The first line of defense! This is very basic but often overlooked. A pin/password/pattern are all great! While alternative lock screens might look good, there security is questionable. As one can get around it if they can make your system run on system apps only. While I know little about it market lockscreens and their security. Perhaps it be possible using an app such as Link2SD to make it a system app. Adding better security?

Fingerprint is secureish, but security concerns about fingerprint harvesting is a reason I don't use it. Good security system includes keeping your screen clean and buttons.

Don't like yucky screens.

Sim Lock

Enable Lock SIM card, found under:

Settings -> Personal -> Security -> Set up SIM card lock.

Simply put this will mean after turning your phone on you'll need to put in a pin to ring anyone.

Device Encryption

Pretty basic. Encrypt your data. You life. Encryption for everyone!!!

Settings -> Personal -> Security -> Encryption.

Nfc

TURN IT OFF UNLESS YOU NEED IT ON!!!

My dislike of contactless is well founded, I know a few people who have been done by countless swipe hacks. £10 taken out 6 or 8 times poor people. While some NFC or pay apps can only be used with a passcode or fingerprint which adds more security, general rule is having it turned of. Saves battery too so... Ye

Software Updates

To be fair most of the resident xdaers are well up-to-date with security patches. As most of you run roms. With security updates in them. So keep your self updated!

Applications

VPN's

Virtual private networks, aren't only useful for hackers trying to stay hidden but useful for normal people to hide their ips from the evil-doers of the world. While Vpn's are not 100% mainly because there is a gap between connection to the VPN. They are great on the hole.

Open VPN (Both Connect and for Android)

Play Store Link

This is an app that allows you to connect to the various Vpn's, while most are paid a few are free (see Note). Majority of sites explain how to connect to their VPN others aren't as simple this app also means you can make your own VPN and connect to it. Some useful guides exist below for making your own VPN:

VPN server on Android

tutorial on making and hosting your own VPN

Note: WARNING, while some VPN with a free service and pay for upgrades tend to be trust worthy some fully freemium ones are questionable. Some have been branded honeypots and although you may not worry about being logged it might still bring in some privacy concerns.

Free/Upgrade/Payfor VPNs

VyrpVPN

Playstore link

Possibly the fastest and most reliable, doesn’t share your data with anyone, and only keeps logs of IP addresses, connection times, and bytes used for 30 days. It offers 50 server locations spread across the globe, support for 256-bit encryption, and uses Chameleon, which hides the fact you are using a VPN service. It's a little pricey. But I'd always advise going for by yearly in any VPN it always works out cheaper. But there is a free option with a limited usage limit.

Tunnel bear VPN

Playstore link

I use this one personally. While it might not be the fastest it's very versatile easy to use no fiddly bits, and also its excellent value for money with it clocking in around £30 quid a year for up to 5 Devices, TunnelBear doesn't track what you do online, no logy logy of your IP, and won't whore out your data with them third-party peps. It also supports 256-bit encryption. So woo! Also has a free 500m monthly limit as well if you want to try it out.

NordVPN

Playstore Link

Possibly the most well established VPN. Some SERIOUS Encryption under the hood and they log absolutely nothing as well. Again yearly Plan is a lot cheaper. And possibly cheapest one. All rounder really also the account has a .ovpn file which is required by open VPN app.

Express VPN

Playstore Link

The service allows you to have two symoltanious connections which, I don't know, might be useful to you. They have good customer service though and pretty good connection. No logging and pretty well priced. With a 30-day back guarantee.

IPvanish

Playstore Link

They take no logging seriously! And have a solid encryption and a good price scheme. There's not much to say about this one. It's very good though.

The above are ones I personally or people I know have used, they are by no means in order. There are a number of ones that available do a good search! Always do research. Find good deals and make sure you are always secure.

Antivirus

It's still a bit of a question if you really need an Antivirus on Android. I personally say it's useful as a tool box. Most provide find my phone and so on.

Avira

Playstore Link

Test Results here:Av-Test

A great app, not too intrusive. Really useful and fairly simple to use.

Lookout

Playstore Link

I use this one personally with conjunction with another. Has theft protection and a number of other features that need an upgrade

Avast

Playstore Link

Test results here:Av-test

I use this one as well. It's a great service and very useful. Wifi scanning, call blocking and a number of other features.

AVL

Playstore Link

This is a bear bones app just for maleware scanning. Great app. Easy to use.

Sophos

Playstore Link

Test results here:av-test

Very solid app. Useful to have to protect you. Simple app. Business level protection.

The above list is from apps I my self have used and can recommend. As always there is a large variety. Search away, check tests on independent labs. And decided for your self.

Findmyphone Apps

Loosing your phone is concerning, a lost phone could fall in hands of a nice person. But then it could end up in an evil doers hand thus wiping of data is fundamental! The following apps are highly recommended and well rated.

Android Device Manager

Cerberus

Prey

mySecureMail

Playstore link

Unlimited amount of email accounts in one encrypted secure place. Password protected and Free!

1Password

Playstore Link

Having various passwords can be confusing, while the actual security of them is questionable after all having passwords saved on your phone might be concerning. But with high encryption and good security keeps all your information safe and secure!

Signal

Playstore Link

It provides end-to-end encryption to secure all communications and the app can also verify the identity of who people are messaging, as well as the what channels they are using! A really secure app, with concerns mounting about how private you really are this app is very good for security.

Applock

Playstore Link

Lock all your important apps from being prayed on. Does what it says on tin.

SnoopSnitch

Playstore Link

This only works on some phones! Be careful. It's basically a IMSI catcher.

There is another one here which in my opinion is a fantastic app and deserves support! XDA IMSI catcher

An IMSI Catcher is a great peace of kit warning against fake base stations. Or trying to scan your network.

AFwall+

PlayStore Link

A front end app that means you can set what apps are allowed to use Internet.

//While there is no support yet for Nougut for xposed: But for those running below The app XPrivacy is a must have! Really good security focused app.

Firefox Addons

But I use Chrome/Opera/<Insert other browser here>, I use Firefox on my phone, the reason being is because of the extension side. While I am aware opera has this addon ability, I will be using Firefox Addons only. Also Chrome has no extension support for mobile yet? Oh well munches out on RAM anyway.

These Addons are mirrored on Opera, if you prefer Opera, I'm sure you can find the same addon or one that works similar.

Bluhell Firewall

Addons Link

Lightweight Ad-Blocker and Tracking/Privacy Protector.

CanvasBlocker

Addons Link

Blocks the JS-API for modifying to prevent Canvas-Fingerprinting

CleanLinks

Addons Link

Converts obfuscated or nested links to genuine clean links.

Decentraleyes

Addons LinkThe aim of this add-on is to cut-out the middleman by providing lightning speed delivery of local (bundled) files to improve online privacy.

Disable WebRTC

Addons Link

WebRTC leaks your actual IP addresses from behind your VPN, by default.

HTTPS Everywhere

Addons Link

enabling HTTPS encryption automatically on sites that are known to support it

Privacy Badger

Addons Link

Better Privacy stops ads and invisible trackers

Pro Latte Content Filter

Addons Link

Block sites containing pornography, or any other kind of material, based on simple keyword lists.

Self Destructing Cookies

Addons link

BOOM!! GOES THE COOKIES.

//Optional

Less spam, please

Addons Link

Disposable Emails. Great for them pesky sites that ask for emails the spam you with rubbish

Ad Block plus

Addons Link

Does what it says on the tin. There are Addons that block pages from saying you have an ad blocker.

Secure Mail Providers

Why more people don't use secure encryption emails is beyond me sometimes. But regardless it's something I'd strongly recommend! Tell your friends too, and family! Get your dog on them. While there are a number available the following are ones I've used or still continue to use!

Proton Mail

Lavabit.com

hushmail.com/

vfemail.net/

Proton Mail is the main one I use anymore. It's an excellent app and great service with double log in and encryption. Like your emails in a double safe. Do note! If you forget your password, it will turn your emails into plonk and be completely useless.

Thank you for reading this post! I really appreciate it, I put this together just so people can be helped there is no one place. My hope is to turn this into quite a buzzing post, I'd like to constantly update it having it a great go to resource for your needs. Give me a thanks for my hard work if you think it's deserved

:)

Warning: The following is not for Amateurs or new to XDA, you

MUST

be running a LinuxGNU interface! This is extra security usually set on PCs, and may work depending on your interface.

A Tad too Paranoid

Ipkungfu

Open up your terminal running in your Linux IDE.

Input :

sudo apt-get install ipkungfu

Next we need to configure the file there are two ways to do this way 1 you can configure in the terminal with "Nano" :

sudo nano /etc/ipkungfu/ipkungfu.conf

Or move it to SD card, open with your favorite text editor then move back like so:

mv /etc/ipkungfu/ipkungfu.conf /sdcard

Then to move back:

mv /sdcard/ipkungfu.conf /etc/ipkungfu

Once you have got the config file open you want to un comment and adjust accordingly to your needs. Here is an example of what you can change:

# IP Range of your internal network. Use "127.0.0.1"
# for a standalone machine. Default is a reasonable
# guess.
LOCAL_NET="192.168.1.0/255.255.255.0"

-------

# Set this to 0 for a standalone machine, or 1 for
# a gateway device to share an Internet connection.
# Default is 1.
GATEWAY=0

-------

# Temporarily block future connection attempts from an
# IP that hits these ports (If module is present) FORBIDDEN_PORTS="135 137 139"

-------

# Drop all ping packets?
# Set to 1 for yes, 0 for no. Default is no.
BLOCK_PINGS=1

-------

# What to do with 'probably malicious' packets
#SUSPECT="REJECT"
SUSPECT="DROP"

-------

# What to do with obviously invalid traffic
# This is also the action for FORBIDDEN_PORTS
#KNOWN_BAD="REJECT"
KNOWN_BAD="DROP"

-------

# What to do with port scans
#PORT_SCAN="REJECT"
PORT_SCAN="DROP"

These are just a suggestion, adjust to your needs!

Once you've done and moved back or saved the nano, (to save use ctrl+X) everything should be done. Now type in:

sudo ipkungfu

Jump on over to shields Up and see something Coolio. Hopefully.

Snort

This is intrusion detection, have a look at seeing who's been at your door, this is a basic configuration. To set this up. We simply type:

sudo apt-get install snort

Once that's done type:

snort -D

All done, you can view live packets like so:

sudo snort

Or view logs:

sudo nano /var/log/snort/alert

~ More May be added soon

~ Give us a thanks please