Android 17 Enhances Security by Restricting Accessibility API Access to Reduce Malware Risks

Views: 201 views

153/69 Tuesday, March 17, 2026

Google has begun testing new security features in **Android 17 Beta 2 under the Android Advanced Protection Mode (AAPM). This mode restricts general applications from accessing the Accessibility Services API, aiming to reduce the risk of abuse by malware. AAPM was first introduced in Android 16 and functions similarly to Apple’s Lockdown Mode by placing devices in a hardened security state, including blocking app installations from unknown sources, limiting USB data transfers, and enforcing scans through **Google Play Protect to mitigate advanced cyber threats.

Under this new measure, only applications explicitly designated as accessibility tools—with the attribute isAccessibilityTool=”true”—will be allowed to use the API. These include legitimate tools such as screen readers, voice control systems, and braille support applications. Other categories of apps, including antivirus software, password managers, device customization tools, and automation apps, will be denied access. This change addresses the long-standing abuse of Accessibility APIs by malicious apps to steal sensitive data and gain remote control over devices.

When AAPM is enabled, the system will automatically revoke previously granted Accessibility permissions for apps that are not recognized as accessibility tools and prevent users from granting new permissions unless the mode is disabled. In addition, Android 17 introduces enhanced privacy features such as a redesigned Contacts Picker, allowing users to selectively share only specific data (e.g., phone numbers or email addresses) or limit access to chosen contacts. This provides more granular and secure control over personal data sharing.

Source https://thehackernews.com/2026/03/android-17-blocks-non-accessibility.html