Android 15 could potentially block unauthorised apps from accessing your OTP and 2FA codes

In recent years, Google has continually bolstered Android's security features with additions like Play Protect and others designed to safeguard devices from malicious apps. Now, the tech giant appears to be delving into a new feature for Android 15 aimed at safeguarding one-time passwords (OTPs) and two-factor authentication (2FA) codes from potential hackers.

The Vulnerability of OTPs and 2FA Codes

While OTPs and 2FA codes sent via email or text messaging are convenient for users due to their readability, they also pose a significant security risk. These codes are easily susceptible to theft, raising concerns about data privacy and security.

Android 15 New Security Measure

According to Android expert Mishaal Rehman, Android 14 QPR3 Beta 1 introduces a novel permission known as RECEIVE_SENSITIVE_NOTIFICATIONS. This permission plays a crucial role in enhancing security by restricting access to applications with the corresponding role or those authorised by the original equipment manufacturer (OEM).

[object Object],[object Object]

While Google has yet to provide comprehensive details about the function of this new permission, indications suggest that it won't be accessible to third-party apps. This restriction hints at an impending feature development aimed at concealing sensitive notifications from untrusted apps, offering users enhanced protection against potential data breaches.

Unveiling Hidden Protections

Rehman's exploration also uncovered an unused flag labelled OTP_REDACTION in the Android 14 source code. This flag hints at a feature that could conceal OTP and 2FA notifications on the lock screen, adding an extra layer of security to prevent unauthorised access.

[object Object],[object Object]

Google recently unveiled the first developer preview of Android 15, showcasing a multitude of improvements, particularly in performance, privacy, and security. With the impending release of Android 15 expected alongside the Pixel 9 series in October, users can anticipate enhanced security measures to fortify their Android experience.

end of article