Securing an Android device that has been "jailbroken" or "rooted"

This article applies to:

• Trustwave Mobile Security
• Android devices

Question:

• How do I correct security on an Android device that has been "jailbroken" or "rooted"?

Background:

• Trustwave recommends that mobile devices should not be "jailbroken" or "rooted". When a device is "rooted", all applications have full access to device data and credentials.
• On a "rooted" device, a malicious app could steal personal data or use the device camera and microphone to eavesdrop in real time.

Procedure:

The only secure way to repair a "rooted" Android device is to reset the device to factory settings.

1. Go to Settings > Reset (or Settings > Backup & Reset).
2. If necessary, enter your PIN, password, or pattern.
3. Tap Factory data reset and then Reset phone or Reset tablet. If needed, enter your PIN, pattern, or password.
4. To erase all data from your device's internal storage, tap Erase everything.
5. When your device has finished erasing, pick the option to restart.

Note:

This action removes all music, video, contacts, photos, and calendar information as well as apps and their data. You may want to back up personal information before taking this action. However, if there is a chance that the device has been hacked or compromised, you should be cautions about restoring data.