Most children and young people in Kosovo use an Android phone (Samsung, Xiaomi, Redmi, Motorola, Google Pixel, etc.). The phone holds your photos, chats, social media accounts and often the SMS codes used to sign in to other accounts. If someone gets hold of your phone or installs a harmful app, they could get all of this.
The main risks are: a phone with no screen lock, apps from unofficial sources (APKs), apps with too many permissions, an out-of-date system and a Google Account without 2-Step Verification.
Note: menu names may differ slightly depending on the model and manufacturer (e.g. Samsung, Xiaomi or Pixel). If you can't find an option, use the search (🔍) at the top of Settings.
⚙️ Step-by-step settings
Menu names may differ slightly depending on the model and version.
Set a screen lock
Without a lock, anyone who picks up your phone can see your photos and messages and get into your accounts.
- Open Settings.
- On Samsung: Lock screen and AOD → Screen lock type. On Pixel: Security & privacy → Device unlock → Screen lock.
- Choose a PIN with at least 6 digits, or a Password. Avoid a pattern – it's easy for others to see when you draw it.
- Don't use an easy PIN such as 123456, 000000 or your date of birth.
- After that, you can add your fingerprint or face for convenience – the PIN stays as a backup.
- In Lock screen → Notifications, choose to hide notification content while the phone is locked.
- Set the screen to lock automatically after 30 seconds or 1 minute (Display → Screen timeout).
Update the system and your apps
Updates close security holes that attackers know about and exploit.
- Settings → Software update → Download and install. On Pixel: System → Software updates.
- Turn on automatic downloads over Wi-Fi.
- Check the security updates too: Security & privacy → System & updates (Security update / Google Play system update).
- Open the Google Play Store → profile icon → Manage apps & device → Update all.
- In the Play Store → profile → Settings → Network preferences → Auto-update apps → Over Wi-Fi only.
- If the phone no longer gets security updates from the manufacturer, it's time to think about a newer device.
Turn on Google Play Protect
Play Protect scans your apps and warns you about harmful ones.
- Open the Google Play Store.
- Tap the profile icon in the top right → Play Protect.
- Tap the settings icon (⚙️) in the top right.
- Turn on Scan apps with Play Protect.
- Go back and tap Scan for an immediate check.
- If Play Protect warns you about an app, uninstall it – don't ignore the warning.
Block installs from unknown sources
APKs from websites, Telegram groups or links in messages are the most common way viruses and spyware get onto phones.
- Settings → Apps.
- Open the ⋮ menu or Special app access.
- Choose Install unknown apps.
- Check the list: your browser, WhatsApp, Telegram, file manager, etc. should all be set to Not allowed.
- On Samsung, also turn on Auto Blocker: Settings → Security and privacy → Auto Blocker – it blocks installs from unauthorised sources.
- Only install apps from the Google Play Store or the manufacturer's official store (e.g. Galaxy Store).
Check app permissions
Many apps ask for access to your camera, microphone, location or contacts without needing it.
- Settings → Security and privacy → Privacy → Permission manager. On some models: Settings → Privacy → Permission manager.
- Open Camera, Microphone, Location, Contacts, SMS and Files one by one.
- For each app, ask yourself: does it really need this? A game doesn't need your SMS or contacts.
- Choose Allow only while using the app or Ask every time instead of Allow all the time.
- Under Location, turn off Use precise location for apps that don't need it.
- Also look at the Privacy dashboard to see which apps have recently used the camera or microphone.
- Check Settings → Apps → Special app access → Device admin apps, and Accessibility: unknown apps here are a warning sign.
Protect your Google Account with 2-Step Verification
Your Google Account unlocks Gmail, your photos, your contacts and phone recovery. A password on its own isn't enough.
- Settings → Google → Manage your Google Account, or go to myaccount.google.com.
- Go to Security.
- Choose 2-Step Verification and follow the instructions.
- Add Google prompts or an authenticator app; use SMS only as a backup.
- Create a passkey for safer sign-in without a password.
- Add a recovery email and phone number, and keep your backup codes somewhere safe.
- Run the Security Checkup at myaccount.google.com every few months.
Turn on Find Hub and theft protection
If your phone is lost or stolen, you can find it, lock it or erase it remotely.
- Settings → Google → All services → Find Hub (previously called Find My Device) → turn it on.
- Make sure Location is switched on.
- On Samsung you can also turn on: Settings → Samsung account → Find My Mobile / SmartThings Find.
- On newer versions of Android: Settings → Google → All services → Theft protection → turn on Theft Detection Lock and Offline Device Lock.
- Try google.com/android/find once on a computer so you know how it works.
- Write down your phone's IMEI number somewhere (dial *#06#) – you'll need it if you report the phone to the police.
Make a backup
If your phone is lost, breaks or has to be reset to factory settings, you won't lose your photos and contacts.
- Settings → Google → Backup → turn on Backup by Google One. On some models: Settings → System → Backup.
- On Samsung you can also use: Settings → Accounts and backup.
- For photos, turn on backup in Google Photos (or the manufacturer's own service).
- For WhatsApp: WhatsApp → Settings → Chats → Chat backup.
- Once a month, check that the date of the last backup is recent.
✅ Do / Don't
✅ Do this
- Use a 6-digit PIN or a password, plus automatic screen lock.
- Install updates as soon as they come out.
- Only download apps from Google Play or the manufacturer's official store.
- Read the permissions an app asks for before you install it or open it for the first time.
- Delete apps you no longer use.
- Turn on 2-Step Verification for your Google Account and social media.
- Keep Find Hub switched on and back up regularly.
- On public Wi-Fi, use mobile data or a trusted VPN when signing in to important accounts.
- Ask a parent or teacher when a message or app seems suspicious.
❌ Don't do this
- Don't install APKs from links, Telegram/WhatsApp groups or “free games” websites.
- Don't give your phone PIN to friends.
- Never share a code you receive by SMS – no genuine company will ask you for it.
- Don't give apps Accessibility or device admin access unless you know exactly why.
- Don't “root” your phone, and don't install modified versions of apps.
- Don't tap links in texts about a “parcel waiting”, a “prize you've won” or a “blocked account”.
- Don't leave your phone unlocked and unattended at school or in a café.
- Don't ignore Play Protect warnings.
👨👩👧 Parental controls with Google Family Link
Google Family Link is Google's official, free tool for supervising a child's Android phone. Parents manage it from their own phone (Android or iPhone).
- The parent installs the Google Family Link app from the Play Store or App Store on their own phone.
- On the child's phone: Settings → Google → Parental controls → Get started, and choose Child or teen.
- Sign in with the child's Google Account (or create a new one for the child) and link it to the parent's account.
- In Family Link → the child's profile → Controls → Google Play: require parental approval for every download or purchase and set age-based restrictions.
- Under Screen time: set a daily limit and a bedtime schedule (Downtime).
- Under Content restrictions: turn on SafeSearch in Google and website filtering in Chrome.
- Review app permissions and, if you wish, the device's location.
Family Link works best when your child knows it's being used and why. Talk openly – supervision doesn't replace conversation. For teenagers, some controls may vary by age and country.
⚠️ Warning signs
- The battery drains very quickly or the phone heats up for no reason.
- Ads appear on the screen even when you're not using any app.
- There are apps you didn't install, or apps with no icon or name.
- Your internet (mobile data) use suddenly goes up.
- Friends get messages from you that you didn't send.
- You receive SMS verification codes you didn't ask for.
- An app has Accessibility or device admin access without you knowing.
🆘 If you get hacked
- Step 1: Disconnect from the internet (turn on Airplane mode) and tell a parent or teacher straight away.
- Step 2: From another, safe device, change the passwords for your Google Account and social media; at myaccount.google.com → Security → Your devices, sign out any devices you don't recognise.
- Step 3: On the phone, uninstall unknown apps; if they won't uninstall, first remove their device admin permission (Settings → Security → Device admin apps).
- Step 4: Open the Play Store → Play Protect → Scan.
- Step 5: If the problem continues, back up only your photos and contacts, then reset the phone to factory settings (Settings → General management / System → Reset → Factory data reset).
- Step 6: Turn on 2-Step Verification everywhere and warn your friends not to open links they received from you.
- Step 7: If there are threats, blackmail or stolen money, keep the evidence (screenshots) and report it to Kosovo Police on 192 (emergency: 112).
More help: Help & Reporting