Google announced that on Android 17, turning on Advanced Protection automatically restricts the AccessibilityService API to verified apps categorized as Accessibility Tools. That API lets an app read the screen, watch what you do and tap on your behalf, which makes it essential for screen readers and voice control. It is also the main way Android banking trojans and spyware work: once a victim is tricked into switching it on, malware can start fund transfers from banking apps, log keystrokes, draw fake login screens and block its own removal. Google has already blocked sideloaded apps from enabling it, added in-call protections, and let developers flag sensitive views, so this closes one more path for users who opt in.
The same Advanced Protection update adds several other features. Intrusion Logging records security and network events in encrypted cloud storage that only the user can read, kept for a rolling 12 months, to help investigate suspected spyware; it is off by default and needs a separate opt-in. USB Protection defaults new connections to charge-only while the phone is locked. Chrome’s WebGPU is disabled to shrink browser attack surface, Failed Authentication Lock fully locks the device after repeated failed attempts in settings or secured apps, and a new page shows which installed apps check your Advanced Protection status. All of this is on Android 17 devices, except USB Protection and Failed Authentication Lock, which are limited to select devices.
How to check if you’re affected
Affected devices are phones running Android 17 where Advanced Protection is switched on. The features roll out to existing Advanced Protection users and show up as a notification.
- Check the setting: on a device running Android 17, open the Advanced Protection settings page and confirm it is on.
- Opt in to logging: Intrusion Logging is not enabled automatically, so turn it on manually from the same page if you want forensic records.
- Assistive apps: if you rely on a screen reader or voice control app, make sure it is a verified Accessibility Tool, since other apps lose accessibility access under Advanced Protection.