Staying Safe on Google Play: Spotting Unsafe Apps

Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.

Get my free Dashboard →

Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.

How Google Play Protect works

Google Play Protect is Android's built-in security service. It scans every app before you install it and continues to check your installed apps for harmful behaviour. It is enabled by default but worth verifying:

Open Google Play, tap your profile picture, then Play Protect
If a recent scan has flagged anything, follow the recommendations shown
Tap "Scan" to run a manual check at any time
Play Protect also warns you if you try to install an app from outside the Play Store

4 steps

How to evaluate an app before downloading

Even with Play Protect active, a few minutes of research before installing an unknown app is time well spent:

Check the developer name: search for it online to confirm it is a real, established company
Look at the number of downloads and reviews; very few reviews on a popular-sounding app is a warning sign
Read recent one-star reviews, genuine problems tend to show up there
Check when the app was last updated; apps not updated in years may have unpatched security flaws
Confirm the app name matches exactly: fake apps often use names almost identical to legitimate ones

5 steps

Red flags to watch for

These signs suggest an app may not be trustworthy:

Requests permissions that do not match its function (a torch app asking for contacts)
Developer name is a string of random characters or numbers
Screenshots look low quality or copied from another app
The app description has spelling mistakes or poor grammar
The privacy policy link goes nowhere or is missing entirely

5 steps

After installing an app

The risk does not end at installation:

Pay attention to what permissions the app requests the first time you open it
If an app later requests new permissions it did not need before, investigate why
Delete apps you no longer use: unused apps can still run in the background
Keep all apps updated: updates often patch security vulnerabilities

4 steps

Track your Android security progress. Free.

Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.

Start your free security check

Staying safe on Google Play

How Google Play Protect works

How to evaluate an app before downloading

Red flags to watch for

After installing an app