New phone setup: essential security steps

Before you begin

If you are transferring from an old phone, use Google's built-in backup and restore rather than copying apps manually. This ensures your settings and data are restored cleanly. Have your Google account password ready.

• Use a Google account you trust and control
• Avoid logging into your Google account on shared or public Wi-Fi during setup
• Decline optional data-sharing steps unless you have reviewed what they share

• →Not sure what you already have set up? See: How secure is your Android phone? A quick check

Security settings to complete during setup

During the Android setup wizard, you will be guided through several security steps. Complete all of them:

• Set a PIN or password of at least six digits: avoid obvious sequences like 123456
• Enable fingerprint or face unlock as a secondary method for convenience
• Sign in to your Google account and enable Google Play Protect when prompted
• Enable automatic updates for both Android and apps
• Set up Google Backup so your data is safe if you lose the device

First steps after setup

Once the setup wizard is complete, take ten minutes to complete these additional steps before installing any apps:

• Go to Settings > Security and confirm Google Play Protect is enabled
• Go to Settings > Privacy and review the Location and Permissions sections
• Open your Google account settings and run a Security Checkup
• Enable Find My Device: Settings > Security > Find My Device
• Review notification settings: decide what appears on your lock screen

Choosing which apps to install

Only install apps you genuinely need. More apps mean more attack surface. When you do install apps:

• Install only from Google Play: avoid unofficial app stores or APK files
• Check the developer name and reviews before installing any app
• Deny permissions that do not make sense for the app's purpose
• Review what permissions each app has requested: Settings > Apps > [App name] > Permissions