ZEKASTRA

Training module

Phones and apps

Screen lock, app sources and permissions, and what to do when a phone is lost or a SIM is taken over.

9 minutes Basic

What you will be able to do

  • Lock and encrypt a phone sensibly.
  • Review app permissions and sources.
  • Prepare for loss or theft before it happens.

The phone is the key to everything

It holds your mail, your authenticator app, your banking app and the SMS codes sent to you. Protecting it protects the accounts behind it.

  • Use a screen lock with a six-digit PIN or longer, or a passphrase; a short pattern is easy to watch and guess.
  • Keep storage encryption on; current phones do this by default once a lock is set.
  • Turn on the manufacturer's find-and-erase feature, and know the steps to use it from another device.
  • Hide notification content on the lock screen for messages and codes.

Where apps come from

Install from the official store and check the publisher's name, not only the app's name; copies of popular apps exist. Installing from files sent in a message or from unofficial sites bypasses the store's checks and is a common route for malware. Remove apps you no longer use, because each one is one more thing that needs updates.

Permissions

A torch app has no need for your contacts, and a game has no need for your microphone. Review permissions by category (location, camera, microphone, contacts) rather than app by app, and choose “only while using the app” where the system offers it.

If the phone is lost or the number is taken over

For a lost phone: lock or erase it from another device, then change the passwords of the accounts it was signed in to, starting with e-mail. If your phone suddenly loses signal for no reason and you receive notices about sign-ins you did not make, your number may have been moved to another SIM. Contact your operator from another phone at once, and move your important accounts away from SMS codes to an app or key.

Key points

  1. A long PIN, encryption and find-and-erase are the basics.
  2. Official stores, few apps, minimal permissions.
  3. Move key accounts off SMS codes.

Check yourself

Choose an answer to see the explanation. You can start again at any time.

1. A friend sends an installation file for a free version of a paid app. What is the right call?

Files from outside the store skip its checks, and your friend's phone may itself be compromised.

2. A weather app asks for access to your contacts. What should you do?

A permission that has no link to the function is a reason to decline or to look for another app.

3. Your phone drops its signal for no clear reason and sign-in alerts arrive. What is the first step?

A taken-over number can receive your SMS codes; speed matters.

Go further

Sources

This section is for defence and learning. Do not test systems you do not own or have written permission to test: unlawful access to an information system is an offence (Turkish Penal Code, Article 243).