Android 16 appears to be paving the way for improved security against attacks that utilize USB devices to breach security measures and potentially access sensitive information. Google has consistently emphasized its efforts to enhance Android’s security for its users. Despite taking significant steps toward a safer platform, the area of USB-based attacks has not received as much attention until now, with Android 16 reflecting this pivotal change.

A recent report from Mishaal Rahman highlights a feature introduced in the Android 16 Beta 4 release, which blocks USB devices when the phone is locked. This new Security Mode employs Android’s Advanced Protection Mode (APM) to prevent USB devices from functioning when the device is secured, rendering them inoperative. Typically, Android allows the use of USB devices while the phone is unlocked.

These can range from USB storage devices to adapters for connecting peripherals like keyboards. Many users prefer to store important files on external drives or may need an external keyboard for convenience. However, these devices also present significant security vulnerabilities, particularly in the hands of malicious individuals.

To combat this, Google has implemented measures to disable USB functionality if the device is locked. This is particularly useful in scenarios like phone theft, where a thief might attempt to access sensitive data by connecting external devices. When APM is enabled, connecting a USB device will not work until the device is unlocked, adding an essential layer of protection.

However, it’s important to note that this new security feature only prevents newly connected USB devices from accessing data when the phone is locked. If a device was already connected before locking the phone, it will remain active, potentially allowing unauthorized access. While there remain concerns over this, the introduction of USB blocking marks a significant step forward in Android’s security framework, even if it’s not yet clear how accessible these features will be to users.