critical theft protections by default, introducing session-based controls for sharing specific contacts and precise locations, and thwarting scammers through system-level SMS OTP delivery delays and real-time app behavioral monitoring.*

**Giving you more control over your contacts list**

Android 17 introduces a new system Contact Picker that provides a standardized, secure, and searchable interface for sharing contacts with apps. Historically, apps needing access to a contact or two relied on the broad READ\_CONTACTS permission which gave them access to your entire contacts list. Android's Contact Picker addresses this by allowing you to grant apps access to only the specific contacts you choose.

https://preview.redd.it/ndcpkv29ko7h1.png?width=1625&format=png&auto=webp&s=0721daf71e809b58d722717fb1abf507e59430cd

For devices running Android 17 or higher, the system automatically upgrades certain contact selection intents to the new, more secure interface, but we want developers to integrate the new Contact Picker so they can take advantage of its new capabilities, like multi-selection support. To this end, [Google Play will require](https://support.google.com/googleplay/android-developer/answer/16909972#contacts-permissions) that all applicable apps use it (or a privacy-focused alternative like Sharesheet) as the primary way to access users' contacts. The broad READ\_CONTACTS permission is reserved for apps that can't function without it.

**Making location access more private**

Android 17 introduces several new features to help you safeguard your private location information. This includes the Location Button, a new, privacy-conscious way for you to grant precise location access to apps. This is a system-rendered button that developers can embed directly into their apps. When you tap this button, the app is granted precise location for the current session only. Subsequent taps while running the app grant the permission immediately without showing a system dialog. 

Developers can deploy this simple, private location flow for common tasks like finding a nearby shop or tagging a social post. And to increase adoption of the Location Button, Google Play will [require apps](https://support.google.com/googleplay/android-developer/answer/16909972#location-permissions) to use it for one-time precise location access unless they require persistent, always-on location access.

https://preview.redd.it/9qtwqs29ko7h1.png?width=1598&format=png&auto=webp&s=68aec05b389e4360d02f106631c656a96db3edff

Additionally, Android 17 now shows a persistent indicator in the status bar when a non-system app accesses your location. You can tap this indicator to see which apps have recently accessed your location.

The update also improves the algorithm for approximate (coarse) location to be aware of population density. This improves the privacy of granting an app approximate location access when you're in a low-population area.

And lastly, Android 17 redesigns the location permission dialog to make the "Precise" and "Approximate" options more visually distinct.

**Stronger protections against device theft**

Following a [successful pilot in Brazil](https://security.googleblog.com/2026/01/android-theft-protection-feature-updates.html), we’re enabling two of Android’s key theft protection features (Theft Detection Lock and Remote Lock) by default globally on all new Android 17 devices, as well as those freshly reset or upgraded to the latest OS.  

On supported devices, Android 17 also significantly reduces the number of times someone can guess the PIN, pattern, or password and adds longer wait times between failed attempts. The update also refines how the lock screen shows information after failed attempts have been made.

And we’re also enhancing Find Hub’s ‘Mark as lost’ feature by [requiring biometric authentication](https://preview.redd.it/new-features-emojis-security-improvements-heres-everything-v0-4ury110jqq0h1.png?width=1730&format=png&auto=webp&s=df59cbdd5bf4c922049e4824e7ba2201030f6613) in addition to your device’s PIN, pattern, or