Recommended Free Tools
After updating your phone, check that its software is current, then review the lock screen, account security, device-finding controls and app permissions. Android and iPhone organize those checks differently. An update is a useful reminder to review them, but Google’s and Apple’s guidance does not establish that routine updates reset these settings.
Start by confirming the phone is up to date
Apple Support calls keeping software current “the single most important thing you can do to maintain the security of your Apple products.” Apple’s iOS security update guidance was published April 2, 2026. On Android, Google’s guidance identifies operating-system and Google system-services updates as sources of security fixes, bug fixes and features; Google system services update automatically by default. That does not describe every manufacturer’s update process or every device configuration. Check the update status shown on your own phone.
As an Amazon Associate I earn from qualifying purchases.
Android: review the Security and privacy overview
Open Settings > Security and privacy on Android 13 and later, according to Google’s guidance. Android 12 and earlier may show separate Security and Privacy sections. Some phones do not have the combined page, and manufacturers can change menu names or organization. If the path is missing, search Settings for the feature name. Google’s Android security and privacy settings guide describes the overview and its controls.
Check the overview for warnings or recommendations, then review the areas relevant to your use:
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- App security: Check for Google Play Protect warnings and other app-security notices.
- Device lock: Confirm your screen lock is set and that you recognize the lock-screen options.
- Accounts security: Review account-related security alerts or recommendations shown on the device.
- System updates: Check the update status displayed by your phone.
- Device finders: Review the device-finding controls available on your phone.
- Privacy: Check permissions and options such as app pinning or lock-screen notifications if they matter to how you use the device.
Android: see which apps used permissions
Open Settings > Privacy > Privacy dashboard, or search Settings for Privacy dashboard if the menu differs. The dashboard shows which apps accessed permissions and when. Google’s documented history window is version-specific: Android 13 shows seven days of activity, while Android 12 shows 24 hours. See Google’s Privacy dashboard guide for details.
Use the activity history to spot access you did not expect, then open the relevant permission or app settings to change access if appropriate. The dashboard’s history window is a record of recent permission activity, not a complete account-security audit.
Rank #2
- HARDWARE 2FA AND MFA: FIDO Alliance Certified FIDO2 v2.1 with CTAP2 plus legacy U2F and CTAP1 for strong two-factor login and passwordless sign-in on services that support security keys
- BUILDING ACCESS ON ONE CARD: MIFARE DESFire EV2 4K applet with AES encryption adds office door and physical access control alongside digital authentication
- CERTIFIED SECURE ELEMENT: An NXP Common Criteria EAL6+ certified secure controller and Java Card platform protects your keys on a tamper-resistant chip
- DUAL INTERFACE SMART CARD: Contactless NFC ISO 14443 plus ISO 7816 contact reader support in an ISO 7810 ID-1 format that is passive and needs no battery
- SWISS ENGINEERED DESIGN: Built by Cryptnox as a single card for authentication and access control and backed by a 2 year warranty
iPhone: review app access in Privacy & Security
Go to Settings > Privacy & Security and review the categories that contain sensitive information or device functions. Apple lists controls for Location Services, Contacts, Calendars, Photos, Bluetooth, Microphone, Camera, Health, Files and Folders, among others. In each category, you can see which apps requested access and change it. Apple’s privacy and Location Services guide explains these controls.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesiPhone: use Safety Check for sharing and access
On an iPhone running iOS 16 or later, open Settings > Privacy & Security > Safety Check. Choose Manage Sharing & Access to review items selectively. Apple also offers Emergency Reset to stop sharing broadly; it is intended for that urgent purpose, not as the routine review option.
Rank #3
- FIDO2/Passkey Authentication – Secure, passwordless login with supported platforms. Check if your intended service supports hardware keys before purchase. Works with Gmail, Facebook, GitHub, Dropbox, and more.
- Enhanced Multi-Factor Authentication (MFA): Strengthen account security using either FIDO2.0 authentication or TOTP/HOTP codes, providing flexible options for added protection.
- Universal Connectivity: Features USB-A and NFC compatibility, making it easy to use across various devices including PCs, Macs, iPhones, and Android phones for seamless integration.
- Durable & Portable Design: Built with a 360° rotating metal cover for extra durability. Compact and lightweight, it easily attaches to a keychain for on-the-go convenience. No batteries or network required, ensuring dependable use anywhere.
- FIDO Certified & Business-Ready: Certified for FIDO standards and supported by a range of management software suites, ideal for both individual users and enterprise deployment.
Safety Check can help review sharing with people and apps, devices connected to your Apple Account, verification phone numbers, and selected device and account security settings. It requires you to be signed in to an Apple Account with two-factor authentication. Screen Time restrictions or a mobile-device-management profile may make some options unavailable. Apple’s Safety Check guide explains how to use it.
Safety Check is not a universal audit: it does not review non-Apple accounts and passwords, social-media sharing, or some sharing from other devices. Check those services and devices separately if they are relevant to you. See Apple’s Safety Check limitations.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.iPhone: consider Stolen Device Protection
On supported iPhones running iOS 17.3 or later, find Stolen Device Protection under Settings > Face ID & Passcode, or Touch ID & Passcode on supported devices. This optional feature must be enabled before the phone is lost or stolen. Away from familiar locations, it can require biometric authentication for sensitive actions and impose a security delay for selected account or device changes. Apple also allows the protections to be configured to apply everywhere. Review Apple’s Stolen Device Protection guide for eligibility and behavior.
Quick Recap
How the checks differ
| What you are reviewing | Android | iPhone |
|---|---|---|
| Security overview | Security and privacy overview on Android 13 and later in Google’s guidance; Android 12 and earlier may separate Security and Privacy. Manufacturer menus vary. | Review update status and device security settings in Settings; Safety Check can include selected device and account settings. |
| App permission activity | Privacy dashboard; Google’s documented history is seven days on Android 13 and 24 hours on Android 12. | Privacy & Security lists apps that requested access by data or feature category; Safety Check is a sharing review workflow, not an equivalent time-window dashboard. |
| Sharing and connected devices | Review account-security and device-finding controls available in the Security and privacy overview. | Safety Check can review sharing with people and apps and devices connected to an Apple Account, subject to its limits. |
| Theft-related safeguards | Review device-lock and device-finding controls available on your phone. | Stolen Device Protection requires a supported iPhone and iOS 17.3 or later, and must be enabled in advance. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
