# New Android Identity Check locks settings outside trusted locations **URL:** https://discuss.privacyguides.net/t/new-android-identity-check-locks-settings-outside-trusted-locations/24315 **Category:** News **Tags:** article **Created:** 2025-01-23T19:05:00Z **Posts:** 17 ## Post 1 by @BionicBison — 2025-01-23T19:05:00Z > **[New Android Identity Check locks settings outside trusted locations](https://www.bleepingcomputer.com/news/security/new-android-identity-check-locks-settings-outside-trusted-locations/)** > > Google has announced a new Android "Identity Check" security feature that lock sensitive settings behind biometric authentication when outside a trusted location. Should probably be recommended for Android when it rolls out, as PG currently recommends the functionally identical Stolen Device Protection for iOS. --- ## Post 2 by @anon42475305 — 2025-01-23T19:09:11Z Unfortunately, this is a Google Play Services feature, not an AOSP feature. If Google actually cared about protecting users, this wouldn’t be part of their proprietary feature set. --- ## Post 3 by @jonah — 2025-01-23T19:56:54Z To be fair, the feature is more about protecting your Google account than your phone. Just like iOS’s Stolen Device Protection is about protecting your Apple ID and not your phone. --- ## Post 4 by @anon42475305 — 2025-01-23T20:09:03Z That’s true, but a lot of the settings it locks behind biometrics aren’t related to Google account functionality. > Some sensitive actions that fall within Identity Check’s protections include **performing a factory reset** , **changing the screen lock** , **registering a new fingerprint** , turning off ‘Find My Device,’ adding a Google account, **accessing developer options** , and opening Google Password Manager. --- ## Post 5 by @anon80779245 — 2025-01-24T15:11:14Z Many of those already require a fingerprint or PIN anyway. Like enabling dev mode, changinf screen lock, adding FP --- ## Post 6 by @Gnarleyeh — 2025-01-26T01:51:12Z What settings or apps would protect Android devices and or iPhones in the case of theft ? I am not convinced about the trustworthiness of remote methods. Being WiFi access is necessary for this to happen. On my Password Manager, after 5 failed login attempts, my vault is erased. Can this feature be applied to devices as well ? --- ## Post 7 by @pinkandwhite — 2025-01-26T05:40:09Z iOS has a built-in feature you can enable to erase the device after 10 failed attempts, don’t think android does by default, but GOS might have that feature (it seems like it’d be up their alley to add) --- ## Post 8 by @seize — 2025-01-26T16:23:12Z From what i can tell GOS doesn’t have a way to limit the number of incorrect password attempts similar to iOS. though GOS does disable fingerprint after 5 attempts and has a reboot timer if not unlocked within a given time. [https://discuss.grapheneos.org/d/501-wipe-device-after-failed-10-password-attempts](https://discuss.grapheneos.org/d/501-wipe-device-after-failed-10-password-attempts) --- ## Post 9 by @micdan — 2025-01-27T00:25:03Z Crazy how Android is going like iOS and iOS is going like Android nowadays… Lol --- ## Post 10 by @ignoramous — 2025-01-27T03:45:07Z > [@pinkandwhite](#): > > don’t think android does by default, Way off. Android does. Has been doing it since Gingerbread or Ice Cream Sandwich (10+ years ago). --- ## Post 11 by @pinkandwhite — 2025-01-27T04:10:53Z Oh neat, where in settings is it because I was taking a look on my Pixel yesterday and couldn’t find it :sob: --- ## Post 12 by @anon80779245 — 2025-01-27T10:22:44Z > [@Gnarleyeh](#): > > On my Password Manager, after 5 failed login attempts, my vault is erased. Can this feature be applied to devices as well ? This isn’t a good approach. You should learn the CIA principle. --- ## Post 13 by @Gnarleyeh — 2025-01-27T17:53:23Z Pray tell … --- ## Post 14 by @pinkandwhite — 2025-01-28T06:04:31Z I _assume_ they’re talking about confidentiality, integrity, availability (is your data private? has your data been tampered with? can you access your data?) --- ## Post 15 by @Gnarleyeh — 2025-03-21T07:21:23Z > **[@ignoramous](https://discuss.privacyguides.net/u/ignoramous)** We are still waiting ? --- ## Post 16 by @POOLNNOB — 2025-03-22T08:13:19Z How can i enable said function?? --- ## Post 17 by @ignoramous — 2025-03-25T07:57:56Z > [@POOLNNOB](#): > > can i enable said function > [@Gnarleyeh](#): > > are still waiting ? If the OEM doesn’t include this as part of their ROM _Settings_ app, you’ll have to install a “device admin” app ([docs](https://developer.android.com/reference/android/app/admin/DevicePolicyManager#getMaximumFailedPasswordsForWipe(android.content.ComponentName))) that will let you set this. On an AOSP distribution I worked on, we set the device to factory reset after 20 failed attempts (not changeable to a higher value even by other device admin apps, iirc) back in 2012/13! I don’t want to link any app here as “device admin” APIs, in the past (and in the present, too?), were a popular stalkerware vector. Such apps are readily Googleable/Kagiable/Letable/DDGable though. * * * Edit: @anon6884803 had a query for me: > [@Outdated privacy resources](https://discuss.privacyguides.net/t/outdated-privacy-resources/26126/9): > > The last time you were asked for proof you said “its a personal device admin app I used, can’t share… I pointed out to @pinkandwhite that AOSP has had “factory reset on max failed password attempts” since Gingerbread / ICS. The API documentation I shared points out that such a _setting_ can be changed by a “device admin” app starting with Froyo (one release before Gingerbread). And then I said, _if_ OEMs / ROMs one might be using don’t expose this via its _Settings_ app, one could use a “device admin” app to set this up. I recommend being extra cautious with “device admin” apps as they’re a popular stalkerware vector.