In short: On October 1, 2026, Google announced six new Advanced Protection features for Android 17 — closing off USB charging as an attack vector, restricting malicious apps' access to accessibility services, disabling WebGPU in Chrome to shrink the browser's attack surface, locking the device after repeated failed unlock attempts, and keeping an encrypted log of security events. Some features ship on every Android 17 device; others are limited to Pixel 6 and newer for now.
What Google announced
Advanced Protection is Android's strictest security mode, originally built for journalists, activists and other users facing a higher risk of targeted attacks. On October 1, 2026, Google expanded it with six new mechanisms, several of which tie into what our guide on how the LiMP VPN app complements Android's built-in defenses covers at the network-traffic level.
Here are all six features: USB Protection switches a locked device into charge-only mode, blocking data transfer over a cable or accessory — closing off juice-jacking attacks from compromised public charging stations. Accessibility restriction limits AccessibilityService access to vetted apps only — that API is one of the most common pathways malware uses while disguised as a legitimate service. Disabling WebGPU in Chrome shrinks the browser's attack surface by removing a complex graphics engine increasingly used in sophisticated exploits. Failed authentication lock fully locks the device after a string of failed unlock attempts. Intrusion logging, protected with end-to-end encryption, keeps a record of security and network events in the cloud for up to 12 months, accessible only to the device owner. Supporting-apps view shows which installed apps are monitoring Advanced Protection status.
Who gets it
Four features — the accessibility restriction, WebGPU disable, intrusion logging and the supporting-apps view — work on any Android 17 device. The two most technically demanding ones, USB Protection and Failed Authentication Lock, are currently limited to Pixel 6 and newer, plus select other Android 17 devices, with broader manufacturer support expected to follow.
What it means for everyday users
Advanced Protection used to feel like a mode built for the paranoid: it required a physical security key and noticeably reduced day-to-day convenience. This new set of features shifts the focus toward threats that hit far more than a journalist under state surveillance — a phone stolen from a pocket with an attacker trying to brute-force the lock screen, a malicious app disguised as something harmless, or charging your phone from a random outlet at an airport or café.
Juice jacking isn't an abstract threat: a compromised charging station or a tampered cable can pull data off an unlocked phone within seconds while it's charging. USB Protection, active whenever the device is locked, closes off that vector almost entirely, even if you physically plug the cable into an unfamiliar port.
How to turn it on
The four baseline features on Android 17 are enabled under Settings → Security & privacy → Advanced Protection — one toggle, with no need to configure each feature separately. USB Protection and Failed Authentication Lock will appear in the same section on supported models as the rollout continues. Turning the mode on can cost a little convenience — some third-party app features will be unavailable until the app passes an Advanced Protection compatibility check.
The mode doesn't cover the network layer: Advanced Protection doesn't encrypt your traffic or hide your IP address from your ISP or a public Wi-Fi owner. For that, pair it with the LiMP VPN app for Android — together, on-device protection and traffic encryption close off most of the common attack paths against a mobile phone. Plans start at 69 ₽/month under a no-logs policy: LiMP VPN pricing.