customers.
* We're rolling this out on Android 11+ devices with Revolut, Itaú, and NuBank in the coming weeks before expanding it to more banks later this year.
* **Improved safety against malicious apps**
* **Live Threat Detection Enhancements:** [Live Threat Detection](https://security.googleblog.com/2024/11/new-real-time-protections-on-Android.html) is a real-time security feature that analyzes app behavior to alert you if an app starts acting suspiciously, and we're enhancing it to find and protect against more types of malicious apps.
* **New warnings:** We're rolling out new warnings about suspicious behavior that could be potentially harmful. This covers SMS forwarding, where an app forwards a message to another number, and accessibility overlay, in which an app uses the accessibility permission to continuously display imperceptible content on the screen that could be used to trick you into taking an unintended action.
* **Dynamic signal monitoring:** Android will be able to warn you about apps that start doing things like changing or hiding their icon and then launching activities in the background or abusing accessibility permissions. To do this, Live Threat Detection will monitor application system interaction for known suspicious patterns in real time. Dynamic signal monitoring will be enabled on select Android 17 devices starting in the second half of the year.

https://preview.redd.it/pbnu4wziqq0h1.png?width=524&format=png&auto=webp&s=8289459ad69d892d5873c3562863bc090ec101c7

* **Stopping malware at download time:** For Chrome on Android, we’re improving app safety by adding another layer of protection at download time. For users who have enrolled in Safe Browsing and want to download an app, we’ll evaluate the APK for known malware and stop you before you download it or warn you.
* **New core protections for Advanced Protection:** With Android 16, we introduced [Advanced Protection](https://security.googleblog.com/2025/05/advanced-protection-mobile-devices.html), a single, opt-in device-level security setting that enables all of Android’s highest security features. We’ve been working to expand the protections offered under this setting with key upgrades like USB protection and Intrusion Logging, and now with Android 17, we’re continuing this work by introducing the following protections:
* Removing access to the accessibility service from all apps that aren’t labeled as accessibility tools.
* Disabling device-to-device unlocking
* Blocking Chrome WebGPU support
* Integrating scam detection for chat notifications
* (Later this year) Enabling Android Enterprise support so organizations can enable Advanced Protection by policy for managed devices.
* **Protecting your SMS OTPs:** Scammers often try to hijack your one-time passwords (OTPs) to gain access to your accounts. To do this, they may deploy malicious apps that ask for permission to read your SMS. In Android 16, we introduced a protection that delays the delivery of messages containing an SMS retriever hash to most apps for three hours. Android 17 now extends this protection to all SMS messages containing an OTP. This means that even if a malicious app has been granted the SMS permission, it won’t be able to read your sensitive OTPs until after they have already expired.
* **Stronger protections against device theft:**
* **Enhanced "Mark as lost" in Find Hub:** With Find Hub, you can already [mark a device as lost](https://support.google.com/android/answer/6160491?hl=en) to remotely lock it with your PIN, pattern, or password as well as show a message or phone number on the lock screen. However, if a thief sees your PIN, pattern, or password before snatching your phone, they can still unlock your phone. To address this, we’ve made the following improvements to Mark as Lost in Android 17:
* **2-step verification:** Your phone will now ask for biometrics in addition to the regular PIN, pattern, or password.
* **Blocking key features:** Triggering Mark as Lost also enables additional protections like hiding