Best Cloud Storage for Android 2024 [Storage on the Go]
Let's Encrypt Will Stop Working For Older Android Devices
Let's Encrypt was founded in 2012, going public in 2014, with the aim to improve security on the web. The goal was to be achieved by providing free, automated access to SSL and TLS certificates that would allow websites to make the switch over to HTTPS without having to spend any money.
Hundreds of millions of sites rely on Let's Encrypt for their HTTPS certificate needs. HTTPS security helps protect sites and users, and makes it harder for malicious actors to steal private information. The project has just announced that, come September 1, 2021, some older software will stop trusting their certificates. Let's look at why this has come to pass, and what it means going forward.
When Let's Encrypt first went public in early 2016, they issued their own root certificate, by the name ISRG Root X1. However, it takes time for companies to include updated root certificates in their software, so until recently, all Let's Encrypt certificates were cross-signed by an IdenTrust certificate, DST Root X3. This certificate had been around much longer, and was already supported by the vast majority of OSes and browsers in regular use. This allowed Let's Encrypt to hit the ground running while they waited for the majority of software to support their own root certificate.
The problem looming on the horizon is the expiration of DST Root X3, on September 1, 2021. Of course, for those running up-to-date operating systems and browsers, there's no major issue. But for those on platforms that haven't been updated since 2016 or so, and don't support the ISRG Root X1 certificate, things will break. This affects any secure communication that uses their certificates, whether it be browsing websites with HTTPS enabled or making connections over SSL or SFTP.
The company notes that perhaps the biggest area of concern is the Android handset market. As most telecommunications networks customise Android software, along with the handset manufacturer themselves, it takes coordination between many organisations to put out an OS update for an Android phone. There's also little financial incentive for companies to support phones that have already been sold. Thus, many users find themselves locked out from OS updates entirely as networks or manufacturers simply neglect to do the work.
Data on the Android installed base, as of September 2020. Android users on versions older than 7.1.1 are the ones who will face issues when DST Root X3 expires on September 1 next year. Based on recent statistics, these users make up roughly a third of the Android userbase – a significant number. With a conservative estimate pegging Android users as a whole making up approximately 80% of the total smartphone installed base, and around 3 billion smartphone users worldwide, back of the envelope calculations show us that leaves around 750 million users that could have issues in the coming year.
Of course, workarounds are possible. While the Android OS, and presumably web browser, are long out of date, there's nothing stopping users installing newer software that supports the ISRG Root X1 certificate. Firefox is available as a browser on the platform, and packs in its own list of trusted root certificates, so is a useful workaround for day to day web use. For developers, it's possible to include ISRG Root X1 as a trusted certificate within an individual app, and discussions are ongoing among those taking to this route. After all, adding an new trusted certificate is just putting a file in a directory, but you need root permissions to do so, which on locked Android phones means a jailbreak.
Let's Encrypt could also seek a cross-signature from another Certificate Authority, similar to when they started out. However, Certificate Authorities take on some responsibility for the certificates they sign, and it's unlikely that another CA would wish to shoulder that burden for Let's Encrypt. Particularly, as the entity is a non-profit, there is little money to be made. As a major pillar in the Internet's shift towards HTTPS encryption as the norm, Let's Encrypt consider it important that the project stand on its own, rather than relying on other for-profit organisations. Given that their root certificate is now widely recognised, outside these edge cases from 2016 and earlier, that seems like a sound decision.
With security on the Internet now more important than ever, this is a problem that isn't going away. In order to play nice with all the other computers on the global network, regular updates are simply the cost of doing business. The benefit of having an open certificate provider like Let's Encrypt around is that their transparency as to the issues and clear communication gives web hosts, developers, and end users more time to deal with the coming changes.
Message Encryption On Android
Android smartphones, like other phones, send text messages in plain text. The text messages can be intercepted and read on the network. The text messages could also be read by anyone with access to either phone, including a phone thief. If you want to send confidential, secure messages on your Android phone, you can use a third-party message encryption application. The encryption app encrypts your outgoing messages using a password. Only recipients with the password can read the message. The message appears as scrambled, nonsensical text to anyone without the password.
Open the Android Market app on your device and install the Secret Message app. Enter a secret key into the Secret Key box at the top of the app's screen, type the message you want to encrypt into the Message box, tap "Encrypt" and tap "Send via SMS" to send the encrypted message. You can also send encrypted messages over email, Facebook or Twitter. The recipient can use the secret key and the Secret Message app or website to decrypt and read the message.
Install Unbreakable SMS from the Android Market. Open Unbreakable SMS and set an encryption password, known as a cipher key in the app. Type a message into the Type Your Plain Text Message box, tap "Encrypt" and tap "Send as SMS" to send the message. You can also send the message over email or post it on Facebook. If the recipient has Unbreakable SMS installed, the app automatically alerts the recipient when an encrypted message arrives and prompts her for a password.
Launch the Android Market and install Cloak SMS. Open the Cloak SMS app and tap "New Message" to compose a new message. Enter the recipient's phone number, your encryption password and a message into the text fields on the screen, then tap "Encrypt and Send" to send the encrypted message. The recipient requires Cloak SMS to enter the encryption password and view the message.
5 Best VPNs For Android In 2024
As more Android users rely on their smartphones to surf the web, virtual private networks have become essential tools to help secure your mobile connection, no matter where you are.
One big advantage of the Android ecosystem is the sheer number of VPN apps you can download from the Play Store. While it's nice to have tons of options, it can be hard to find trusted VPNs that are worth your time and money.
In this article, I'll be running down a quick list of the five best VPNs for Android in 2024.
Top VPNs for Android: Comparison tableWhile all the VPNs on this list secure your internet connection on your Android device, not all of them share the same set of features and pricing. Let's compare what each service has to offer:
Ad blocker Maximum devices Servers and locations Kill switch Free trial Pricing NordVPN Yes 6 6,000+ servers in 61 countries Yes Yes $5.99 per month ExpressVPN Yes 8 Servers from 105 countries Yes Yes $6.67 per month Surfshark Yes Unlimited 3,200+ servers in 100 countries Yes Yes $4.09 per month ProtonVPN Paid users only 10 3,097 servers in 71 countries Yes Free version Has a free version CyberGhost VPN Yes 7 11,677 servers in 100 countries Yes Yes $2.19 per month (2-year plan) NordVPN: Best for all-around security
Image: NordVPN There's a reason why NordVPN has become one of the most popular VPN options today — it provides top-tier security and encryption, fast overall speeds and a user-friendly app experience. NordVPN has little to zero holes in its VPN service and is what I consider a smart choice for any Android user.
Why we chose NordVPNI chose NordVPN for its heavy focus on security and privacy. Its Android app provides specialty servers geared toward security, such as Double VPN servers, obfuscated servers and Onion Over VPN servers.
Figure A
Meshnet on the NordVPN app. Image: NordVPN You also get NordVPN's unique Meshnet file-sharing system on its Android app, giving you a secure way to access and transfer your files through an encrypted connection.
PricingNordVPN's pricing is divided into three tiers: Standard, Plus and Complete. I recommend going for NordVPN Plus to gain access to the full VPN and extra security features such as a data breach scanner and a cross-platform password manager.
For more information, read our full NordVPN review.
ExpressVPN: Best for speed
Image: ExpressVPN ExpressVPN is another popular choice in the VPN space. It's best known for being a simple, easy to use and incredibly fast VPN option for Android. ExpressVPN provides strong encryption for Android users who want to secure internet browsing on their smartphones.
Why we chose ExpressVPNI chose ExpressVPN for its speed. ExpressVPN provides fast speed both in speed tests and in real-world performance. While VPNs normally decrease the internet speed of your internet service provider in exchange for added protection, ExpressVPN's servers provide an almost non-existent decrease in connectivity. If you want to have a secure mobile browsing experience that doesn't sacrifice speed, ExpressVPN is my top choice.
Figure B
ExpressVPN on Android. Image: ExpressVPN Pricing For more information, read the full ExpressVPN review.
Surfshark: Best for users with multiple devices
Image: Surfshark Surfshark is a great pick for users who want an affordable VPN with long-term subscriptions and a fast and pleasurable user experience. It also offers unlimited device connections to add even more value to a single subscription.
Why we chose SurfsharkI find Surfshark to be the perfect choice if you regularly use multiple devices and don't want to leave any of them unprotected. Surfshark can protect your Android smartphone, laptop, tablet and other devices — under one subscription.
Figure C
MultiHop on Surfshark for Android. Pricing Surfshark has three subscription tiers: Surfshark Starter, One and One+. I recommend going for Surfshark One as it provides you with most of the security features you need for a protected connection at a reasonable price.
For more information, read the full Surfshark review.
ProtonVPN: Best free VPN
Image: Proton VPN ProtonVPN is one of the few VPN providers with a fully free VPN app for Android. The app doesn't require users to pay for a subscription or use a free trial to have access to its encrypted server network. ProtonVPN's free VPN can be used long-term as it doesn't have any monthly data limits. Other standout features include an independently audited no-logs policy, AES 256 encryption and a variety of subscriptions to choose from.
Figure D
ProtonVPN's main dashboard on Android. Image: ProtonVPN Why we chose ProtonVPN I chose ProtonVPN as a go-to option for users who want a completely free VPN for long-term use. Its lack of a data cap is a major advantage, especially since other free VPN apps typically have a 1-5 GB data restriction each month.
If you're only looking for basic VPN protection for your Android device, ProtonVPN provides it at no additional cost.
PricingProton has three tiers: Proton VPN Free, Plus and Unlimited. Proton VPN Plus has the components of the free version and additional security features such as an ad blocker, streaming support and Secure Core VPN servers.
For more information, read the full ProtonVPN review.
CyberGhost VPN: Best for unblocking content
Image: CyberGhost VPN If you're looking for a VPN with as many servers as possible, consider CyberGhost VPN. As of publication, CyberGhost has more than 11,600 servers spread across 100 countries and 126 locations. This is almost twice as many servers compared to the other VPNs on this list. A large server network increases the chances that there's a server close to you for the best possible connection and increases access to geo-restricted content.
Figure E
CyberGhost connection. Image: CyberGhost Android official video. Why we chose CyberGhost VPN I chose CyberGhost VPN for its massive server fleet that will benefit people looking for a VPN to stream securely and access geo-blocked content. Its extensive server network also means that it can provide better performance to users residing in locations that may not have as many VPN servers as others.
PricingFor more information, read the full CyberGhost VPN review.
How do I choose the best VPN for Android?When looking for a VPN for your Android device, there are a few key things you need to know.
Main use case for VPNIt's important to know why you want a VPN on your Android phone, tablet or device. Is it for streaming? If so, then a VPN with more servers and locations is best. Is it to secure sensitive data on a work phone? In this case, a security-focused VPN will be the better choice. Knowing what you'll use the VPN for will help you decide which ones are worth considering.
No-logs policy and independent auditsYou want a VPN that not only advertises a no-logs policy but also has independent or third-party audits confirming these claims. No-logs policies are promises from VPN providers that they are not recording or storing any of your browsing activity or personal data.
Strong encryption and securityA modern-day Android VPN should have strong encryption to properly secure your internet connection. Typically, we want to have AES-256 encryption for our Android VPN as this is widely accepted as the gold-standard encryption algorithm in the industry. Other encryption algorithms, such as ChaCha20, are also considered highly secure.
Fast speeds and reliable performanceWhile VPNs do wonders at securing online activity, they can decrease overall speeds since traffic is being routed to more places. You want an Android VPN that provides a fast connection that's also consistent and reliable.
Easy-to-use applicationYou want a VPN that has an intuitive and pleasant-looking application. A VPN for your Android device should ideally be easy to set up. No matter how secure a VPN application is, there's no point if it's hard to configure or turn on.
MethodologyMy process for selecting the five best Android VPNs involved looking at each VPN application's security features, performance and pricing. I also structured my list to highlight a VPN for different users and use-cases.
I downloaded each VPN application on my Google Pixel 6 and assessed each app's included features and user interface. I also supplemented my analysis with previous findings from our full reviews of each VPN listed above.
Comments
Post a Comment