These special phone and app features can help protect you from spyware - BERITAJA

Spyware attacks connected journalists, quality authorities defenders, and governmental dissidents are nary longer uncommon aliases exotic. In early 2025, WhatsApp notified roughly 90 users — galore of them journalists and civilian nine members crossed Europe — that they had been targeted by Israeli spyware institution Paragon Solutions. Months later, Apple sent threat notifications to a caller group of iOS users; forensic study confirmed 2 of them, some journalists, had been deed pinch Paragon’s Graphite spyware utilizing a zero-click attack, meaning they didn’t moreover person to pat a nexus to beryllium compromised. These aren’t isolated incidents. They’re the norm.

For the past 15 years, information researchers person documented countless cases wherever authorities hackers person targeted and successfully compromised journalists, quality authorities defenders, critics, and governmental opponents. 

These attacks trust connected expensive, sophisticated, and stealthy devices that let their operators to hack into and instal spyware connected computers, but particularly smartphones, which clasp virtually each of the information about a person’s regular life. 

Spyware gives its operators virtually afloat entree to the target’s instrumentality and data. Government spies could grounds telephone calls, bargain chat messages, entree photos, and move connected the device’s camera and microphone to grounds ambient sound and grounds adjacent conversations. Spyware besides typically tracks a person’s real-time location.

In consequence to these attacks, tech giants now supply their users pinch amended defenses. In particular, Apple, Google, and Meta connection opt-in features specifically designed to antagonistic targeted spyware attacks. 

Generally speaking, these features adhd other protection, sometimes by turning disconnected aliases limiting immoderate regular features. It’s a tradeoff, but having utilized these myself for a agelong time, I person ne'er recovered them to beryllium excessively onerous aliases annoying to use. 

Tech companies, information researchers who person studied spyware for years, and we astatine TechCrunch, urge that you usage these features if you fishy you whitethorn beryllium a target of authorities surveillance because of who you are aliases what you do. Even if you’re not, these information features will support your information amended protected from entering the incorrect hands. 

No information measurement is perfect, and it’s a changeless effort to support information flaws astatine bay. Spyware makers find caller ways to hack into phones and services, past package makers study from those attacks and respond. Rinse and repeat. 

But that doesn’t mean these features are not worthy using. On the contrary; these features person been proven effective. 

“These features are free, easy to enable, and the champion defense we person coming against blase spyware,” said Runa Sandvik, a information interrogator who has worked to protect journalists and different at-risk communities for much than a decade. “If the features get successful the measurement of thing you request to do, you could easy move them disconnected again — meaning it costs very small to move them connected and effort them out.”

Here’s a recap of these features, and really to move them on. 

Image Credits:TechCrunch / Screenshot /

Apple’s Lockdown Mode

Apple’s Lockdown Mode is disposable connected each Apple devices, including iPhones. Apple says that erstwhile Lockdown Mode is enabled, “your instrumentality won’t usability for illustration it typically does.” In speech for this inconvenience, your instrumentality will beryllium much secure. 

There is grounds that Lockdown Mode has helped successful the past. Citizen Lab recovered that Lockdown Mode stopped 1 spyware attack carried retired pinch NSO Group’s Pegasus software. As precocious arsenic March, Apple said it has ne'er detected a successful onslaught connected an Apple instrumentality pinch Lockdown Mode enabled.

This is what Lockdown Mode changes connected your instrumentality erstwhile you move it on:

• Attachments received connected iMessage different than immoderate images, video, and audio are blocked by default.
• Links and previews successful iMessage are blocked and look arsenic non-linked web addresses. (You could transcript and paste the links into Safari aliases different browser if you want.)
• Fonts, immoderate images, and immoderate web technologies are blocked erstwhile browsing successful Safari.
• Incoming FaceTime calls are blocked if you haven’t contacted that personification earlier aliases successful the past 30 days. 
• Screen sharing, contented sharing complete SharePlay, and Live Photos are unavailable.
• Incoming invitations for Apple services are blocked unless you person antecedently invited that person.
• The Focus characteristic “and immoderate related position will not activity arsenic expected.”
• Game Center is disabled.
• Location accusation is stripped erstwhile you stock photos. 
• “Shared albums are removed from the Photos app, and caller Shared Album invitations are blocked.”
• You request to unlock your instrumentality to link it to an accessory aliases a computer. When connecting a Mac pinch Apple-made processors to an accessory, the machine needs to beryllium unlocked and you person to o.k. the relationship pinch your passcode.
• You can’t link automatically to unfastened aliases nationalist Wi-Fi networks, and you will beryllium disconnected from immoderate non-secure Wi-Fi networks that you antecedently connected to earlier enabling Lockdown Mode. 
• Your telephone won’t beryllium capable to link to 2G aliases 3G cellular networks.
• You can’t instal configuration profiles aliases enroll the instrumentality successful a Mobile Device Management program.

To move connected Lockdown Mode, spell to Settings, past Privacy & Security, and scroll down to Lockdown Mode. Once you alteration the feature, your Apple instrumentality will restart. 

I person utilized Lockdown Mode for years. While I noticed immoderate websites being a spot wonky astatine the beginning, I haven’t noticed that successful a while. Also, you could selectively move disconnected Lockdown Mode for circumstantial websites and apps, without disabling the characteristic entirely. There are immoderate quirks, but I person gotten utilized to them, too.

Image Credits:TechCrunch /

Google’s Advanced Protection Program

Google launched its Advanced Protection Program successful 2017. This characteristic is designed to make your Google relationship much resilient against malicious hackers of each kinds. 

Advanced Protection Program includes the pursuing features:

• Restricts immoderate third-party services and apps from accessing your Google account, and only pinch your permission.
• Enables “Deep Gmail Scans,” which scan your incoming emails for phishing attacks and malicious content.
• Enables Google Safe Browsing successful Chrome, which warns users navigating to vulnerable sites aliases downloading vulnerable files. 
• On Android, you could only instal apps and games from morganatic app stores.
• If personification tries to log into your account, Google takes other steps to verify it’s really you.

To move connected Advanced Protection, spell to its charismatic page and click “Get Started.” This will punctual you to log into your Google account. Follow the instructions there. 

First, you will request to adhd a beingness information cardinal (or a package passkey) arsenic an further verification facet isolated from your passwords. You will besides request to adhd a betterment telephone and a betterment email to your account, aliases usage a backup passkey aliases information key. 

Image Credits:EFF /

Android’s Advanced Protection Mode

Introduced last year and apt inspired by Apple’s Lockdown Mode, Android’s Advanced Protection Mode brings akin defenses to Google’s mobile operating system.

Android’s Advanced Protection Mode provides the pursuing information features:

• Enables Google Play Protect, which guards against malware and unwanted apps, and checks each apps for “harmful behavior.”
• Apps from chartless sources cannot beryllium installed, and updates from antecedently installed apps from chartless sources will beryllium blocked from running.
• Enables Memory Tagging Extension (MTE) connected supported devices. MTE is simply a hardware-enforced characteristic that protects against definite types of vulnerabilities. 
• The instrumentality locks automatically if it detects suspicious activity “indicative of theft,” specified arsenic abrupt and accelerated movement. This is based connected information from the device’s mobility sensors, Wi-Fi, and Bluetooth. 
• The instrumentality locks automatically if it goes offline for a prolonged period. 
• The instrumentality automatically reboots if the telephone has been locked for 72 hours, making it harder to extract information utilizing rule enforcement devices designed to unlock phones, specified arsenic devices made by Cellebrite.
• When the instrumentality is locked, USB connections are blocked.
• Google scans for “unwanted and perchance harmful messages.”
• Links sent via the Messages app from chartless users will beryllium flagged. 
• Connection to 2G networks is blocked.
• Google will place spam callers. 
• You will beryllium capable to surface incoming calls and diminution spam calls automatically. (Available only successful certain regions.)
• Enables Android Safe Browsing, which protects against malicious websites.
• Chrome will automatically enforce HTTPS encryption for each sites.
• Some JavaScript functions are turned off, reducing the browser’s onslaught aboveground for imaginable weaknesses.
• You could besides alteration Intrusion Logging, an optional characteristic that helps researchers analyse spyware attacks. 

To alteration Advanced Protection Mode connected your Android device, spell to Settings, past Security and Privacy, and nether Other Settings, pat Advanced Protection, past pat Device Protection. 

Image Credits:TechCrunch / Screenshot /

WhatsApp’s Strict Account Settings

WhatsApp is utilized by much than 3 cardinal people, including those successful the crosshairs of resourceful authorities agencies. 

The request for hacking devices that target WhatsApp is truthful precocious request that exploits could costs millions of dollars — and they work. In 2019, WhatsApp caught a hacking campaign by NSO Group that targeted about 1,200 users. Early past year, WhatsApp caught different spy operation that ensnared about 90 users successful Europe. 

In response, earlier this year, WhatsApp launched Strict Account Settings, an opt-in characteristic that switches connected immoderate privateness and information controls depending connected the operating system.

On Android and iOS, Strict Account Settings turns connected the pursuing features:

• Two-step verification.
• Security notifications, which alert users erstwhile a interaction has changed their telephone aliases reinstalled WhatsApp, aliases if an attacker takes power of their account. 
• Blocks attachments and media (pictures and videos) from chartless senders by default.
• Link previews are turned off.
• Calls from chartless numbers are silenced.
• Your IP reside is hidden successful calls.
• Your floor plan accusation and activity, specified arsenic erstwhile you were past seen online, your floor plan photo, and About information, are hidden from group who are not your contacts aliases members of a pre-established group. 
• Only contacts aliases members of a pre-established group could adhd you to a group chat.

To move the characteristic on, usage your superior instrumentality and spell to Settings, past Privacy, past scroll down to Advanced and move it on.