Mobile Phone security.....

parcival

Just wanted some advice really about the level of security I should have on my mobile as we all seem to be using them more and more.
I have a Xiaomi phone running Android 10 with the latest security updates installed. I access the phone via either the fingerprint scanner or a 6 digit code.
I use the phone for Gmail, various sport related apps (all from Play Store) and some banking, also, some Spreadsheets etc (which are backed up onto the SD card and my home PC.
Mainly concerned that some of these apps and Gmail are permanently logged in.
What is the risk if I did lose the phone and how can I manage that risk. I have no anti virus software on the phone as advice seems to be that it is not needed.
Your thoughts would be appreciated...

AndyPix

The risk is that someone could find it who knows how to defeat the fingerprint sensor.

That is pretty much the only risk - and it is miniscule.

You dont need any AV on a phone as you quite rightly point out.

Just carry on with life and dont worry about it.

If you lose your phone, then remotely wipe it with googles tools.

https://support.google.com/accounts/answer/6160491?hl=en

jonnygee2

You don't need anti virus. Also, Android comes with anti theft software built in, like remote lock and wipe, if you lose the phone.
Generally the pin / fingerprint combo keeps it secure. Try to avoid typing the pin in in public, if you do have to conceal it but where possible use the fingerprint. The pin should be unique and unguessable.

Make sure your google account is secure too, as you can bypass the lock screen with it. It should have a long, unique password (consider the four random word method https://preshing.com/20110811/xkcd-password-generator/ - extremely secure and memorable) and 2FA (keep the backup codes incase you lose your phone!!).

All that is more than enough for the average user.

parcival

Many thanks both - will look at the remote wipe.....

PRAISETHESUN

The points above are great - my only other suggestion is where possible to lock down individual apps with different PINs where available. If someone were to bypass your lock screen somehow then they would have unrestricted access to emails, whatsapp, bank, etc if they have no security PIN, or if the PIN is the same as your lock screen. Also as many people use their phone as their 2FA device, make sure you have backup codes so you are able to log in to any services on new devices and change your passwords/2FA if you ever need to.