WhatsApp GB and alternatives to its functions.<\/a> It explains the differences compared to the official app.<\/p>\nFour special access points for reviewing<\/h2>\n
Malicious applications can abuse permissions or exploit vulnerabilities. Special access, by itself, does not identify malware: screen readers, management tools, and other legitimate services also need them. Check if the function matches the application and if you know who is responsible for it.<\/p>\n
1. Accessibility<\/h3>\n
Accessibility services can observe interface elements and perform actions according to the system's configuration and restrictions. They are essential for assistive technologies and are also used by some security tools. Authorize only after understanding the purpose, origin, and scope of the request.<\/p>\n
Where to review: Settings, then Accessibility, under Downloaded Apps or Installed Apps. Identify each service before disabling it; preserve the assistive features you rely on. If there is an unknown app, check its profile and installation information.<\/p>\n
2. Access to all files<\/h3>\n
Android limits access to storage. Granting access to all files expands reading and managing shared files, but doesn't automatically release private data for all applications. File managers may need it; check why other types of apps request it.<\/p>\n
Where to review: Settings, Apps, Special app access, \u201cAccess to all files\u201d.<\/p>\n
3. Display over other apps<\/h3>\n
It's screen overlay: the app draws a window on top of whatever is open. Legitimate use is the Messenger bubble. Criminal use is the fake login screen drawn over the bank's app, pixel-perfectly, to capture the password.<\/p>\n
Where to check: Settings, Apps, Special app access, \u201cShow over other apps\u201d (on some devices, \u201cOverlay other apps\u201d).<\/p>\n
4. Device Administrator<\/h3>\n
Administrator access enables certain security policies and may require disabling before uninstallation. Capabilities vary depending on the Android version and management type. On work or school devices, consult the administrator before removing necessary settings.<\/p>\n
Where to review: Settings, Security, or Security & Privacy, looking for Device Admin Apps. Examine the name and policies. If you decide to remove a personal app, disable its access and then uninstall it; on managed devices, follow your organization's guidance.<\/p>\n
\u201cInstall unknown apps\u201d: the switch that gets forgotten<\/h2>\n
Since Android 8, permission to install APKs is granted per app, not for the entire system. You allow Chrome once and the authorization may remain active; the same with WhatsApp and the file manager. Malware takes advantage of this. Go to the list in Settings, Apps, Special app access, \u201cInstall unknown apps\u201d:<\/p>\n
\n- Browser (Chrome, Samsung Internet, Firefox): Off. If you ever need to install something from outside, turn it on, install it, then turn it off.<\/li>\n
- Messaging apps (WhatsApp, Telegram, Messenger): always off. Messages can distribute pirated installers.<\/li>\n
- File manager and download app: turned off.<\/li>\n
- Manufacturer stores and services: check which ones they use, their origin, and the necessary access points, without assuming that a well-known name guarantees provenance.<\/li>\n
- App that you don't recognize with this permission enabled: turn it off and skip to the infection signs section.<\/li>\n<\/ul>\n
What does an antivirus from the store add to Play Protect?<\/h2>\n
An additional tool can be useful when it meets a specific need. Read the Android version's information sheet and check which features require a subscription, special access, or an internet connection.<\/p>\n
File verification.<\/strong> Some products scan accessible files and installers. The scope depends on the system and permissions; don't assume that all antivirus software can read any folder, document, or private content of another app.<\/p>\nLink protection.<\/strong> Filters can alert you to addresses identified as malicious. Coverage varies by browser, application, configuration, and plan. A new address may slip through the analysis, and a warning should not be ignored just because the message came from a contact.<\/p>\nLeak alert.<\/strong> The monitoring system searches for information in known databases. When an alert is received, check the affected service, change any reused passwords, and enable two-factor authentication. The absence of alerts does not prove that your data has never been exposed.<\/p>\nIn addition to that, there's the Wi-Fi checker, which indicates whether the caf\u00e9's network is unencrypted, and the VPN, which in free plans usually comes with a small daily data allowance.<\/p>\n
Free vs. paid: what changes with the subscription?<\/h2>\n
Free installation, trial period, and permanent free use are different conditions. Bitdefender Mobile Security is a distinct product from the same company's Free Antivirus. Check the exact name, the features included, and the renewal process before subscribing. Don't choose solely based on the number of advertised features.<\/p>\n
The antivirus programs I checked on the Play Store<\/h2>\n
The four below were active on the Brazilian Play Store when I wrote this, all free to install. Ratings and downloads are what the store showed and may have changed slightly by the time you open it.<\/p>\n
Avast One<\/h3>\n
Avast One combines threat scanning and privacy features. Check the product page to see which features are available in the free plan and which require a subscription. Package names and the combination of web protection, alerts, and VPN may vary; compare the offer shown in your account.<\/p>\n
![\"Avast](\"https:\/\/play-lh.googleusercontent.com\/Qa9dOOZG1V2muJuTN3GHrtUYGvegTFt3-Lo2y3wknKiyt4jtlv8_z4qG3c5V3xDlb8WGQJWqJpFWgHQ9lOO-aA\")