Using antivirus software of all the devices you have made sense in the early days of the personal computer, but modern smartphones are built to be more secure. Both Apple and Google include extensive security that makes phones harder targets for traditional malware than older PCs.
Today’s biggest smartphone threat is often not malware at all. Documents phishing, fake websites and account takeover scams. That’s why there are more effective ways to improve your security than buying antivirus software for your cell phone.
Your phone is already doing a lot of work
Both iPhones and Android devices are designed to keep apps separate from one another. An application can generally only access information and features that you specifically allow them to use. If the application is malicious it does if it’s slippery, it’s usually more difficult for it to mess with your entire device than it would be on an older computer.
Apple takes a particularly restrictive approach. Apps must come through the App Store (although they increase that in some regions) where they undergo a review process before they are published. Apple also tightly controls what apps can do once installed. For some people, the situation may feel too controlling, but from a security perspective, this approach has its advantages.
That same approach also limits what antivirus apps can do on iPhones. In contrast antivirus software on a Windows PCmobile security apps usually can’t scan the operating system itself because Apple restricts that level of access. There’s not much point in using an antivirus program that can’t even scan your device.
Android gives its users more freedom, which comes with more risk. It is possible to install apps outside of the Google Play Store, known as sideloading. This is also where most malware infections start. But Android includes several built-in protections including Google Play Protect, app permission controls and regular security updates covering newly discovered vulnerabilities.
As a part, The Google Play Store often hides apps that no longer meet current security standardswhich adds another layer of protection.
None of this is to say that phones can’t compromise. Security researchers find new flaws all the time, and bad actors are always looking for ways to exploit them. But compared to the computers many of us used a decade or more ago, today’s smartphones are a much tougher target. Instead, many cybercriminals are focusing their efforts elsewhere.
Your accounts are a bigger target than your phone
Being tricked into giving up account access is arguably a bigger cybersecurity risk than getting malware on your phone. Phishing documents, fake package delivery notices, scam calls again fake login pages have become some of the most common ways criminals target smartphone users.
The formula is usually simple. The message creates a sense of urgency and asks you to click a link, sign in to an account or confirm a payment. The website often looks so legitimate that many people don’t realize anything is wrong until their credentials have been stolen.
This type of attack is known as social engineering and it has become commonplace because it is often easier than finding a technical vulnerability. Modern smartphones have strong built-in security protections, but those protections are often unable to prevent someone from voluntarily entering a password on a fake website.
That’s why many security professionals strive to promote awareness of phishing, strong passwords and two-factor authentication as much as they do to protect themselves from malware. For many people, protecting their accounts is more important than worrying about whether their phone is infected.
Here’s what I recommend instead of getting an antivirus for your phone
If you’re looking for the biggest security advantage, skip hunting for the perfect antivirus app again focus on the things that prevent too much compromise.
- Keep your phones and apps updated
- Download apps only from the App Store or Google Play
- Review app permissions and disable access you don’t need (most apps don’t need your location data, for example)
- Use strong, unique passwords on important accounts
- Store passwords in a password manager (Bitwarden won CNET’s best password manager. I recommend again 1 Password)
- Enable two-factor authentication (preferably not with text) or pass keys if available
- Beware of unexpected texts, links and attachments
None of these steps are the most exciting, but they are the steps that make the biggest difference.
If a mobile security app makes sense
Most people can stop reading here and go about their day. If you keep your phone updated, download apps from official stores and be a little more careful online, you’re probably in good shape.
However, there are exceptions. If you’re the type who often sideloads Android apps, downloads files from strange websites or likes to check out software that didn’t come through Google Play, a mobile security app might offer more peace of mind.
The more you roam outside the guardrails built into modern smartphones, the more security tools come in handy.
