Google has introduced new privacy and network-security protections in Android 17, including stricter controls that prevent apps from scanning devices connected to a user’s local Wi‑Fi network without permission.
The update is designed to reduce household profiling, limit tracking, and defend users against threats ranging from malicious Wi‑Fi activity to cellular SMS scams.
Android smartphones often connect to home Wi‑Fi networks shared by smart TVs, cameras, game consoles, speakers, printers, and other Internet of Things devices.
Previously, an app could potentially discover devices on the same local network without clearly asking the user for access. That information could reveal details about a household’s technology, behavior, or device ownership.
Android 17 now enforces Local Network Protection, requiring apps to request explicit permission before scanning for or connecting to devices on the local network.
This gives users more control over which applications can view nearby devices and communicate across their home Wi‑Fi environment. The restriction does not remove common features such as streaming content to a television.
Instead, Google recommends that developers use secure Android system tools for actions such as casting. Users can select a compatible TV or device through the operating system, without giving the app broad visibility into every device connected to the network.
Android 17 New Protection for Wi-Fi Tracking
The Wi‑Fi privacy improvement is part of a wider Android 17 security update focused on protecting network metadata and encrypted connections.
Google is also adding support for Encrypted Client Hello, or ECH, a privacy technology that hides the name of a website a device is trying to reach during the early stages of an HTTPS connection.
HTTPS already encrypts most traffic between a device and a website. However, network operators and eavesdroppers can sometimes still see domain-name information, allowing them to identify websites or apps being accessed.
This metadata can be used for profiling or to support targeted phishing and scam operations. With ECH and Private DNS, Android 17 aims to encrypt more of this connection data.
For supported websites and applications, the change makes it more difficult for Wi‑Fi operators, internet providers, and network snoops to determine a user’s online destination.
Google’s Android 17 enables Certificate Transparency by default, requiring website and app certificates to be recorded in public logs to help detect suspicious or improperly issued certificates that could enable interception attacks.
Another major change targets 2G downgrade attacks and SMS blaster activity. Criminals use fake cellular base stations to force nearby devices onto older 2G networks, where security protections are weaker.
Attackers can then send fraudulent text messages that imitate banks, delivery companies, government agencies, or other trusted organizations. Android previously offered users a manual option to turn off 2G connectivity.
Android 17 expands this defense by allowing participating mobile carriers to turn off 2G by default for subscribers. The zero-click protection reduces exposure to rogue base stations and phishing messages delivered through legacy cellular networks.
For users, the changes mostly operate in the background. For developers, Android 17 introduces new requirements for local network access and modern encrypted networking practices. Together, the measures show Google’s effort to reduce data exposure across Wi‑Fi, web browsing, certificate validation, and cellular communications.
Prevent incidents due to slow investigations. Power your Tier 1 with threat intelligence from 15K SOCs: Integrate TI Lookup in your SOC
The post Android 17 Adds New Protection for Wi-Fi Tracking to Keep Your Device Secure appeared first on Cyber Security News.