Android 17 Advanced Protection: 6 New Security Features Explained

Google has expanded Advanced Protection on Android 17 with six security capabilities aimed at people who want stronger defenses against scams, theft and targeted attacks. The additions include Intrusion Logging, USB Protection, Accessibility Protection, disabling WebGPU, Failed Authentication Lock and a page that shows supporting apps. Google’s security announcement provides the detailed feature list.

What changed in Android 17 Advanced Protection?

Advanced Protection is designed as a single switch for a stronger set of device and app safeguards. Google says all six additions are available on Android 17 devices, with USB Protection and Failed Authentication Lock limited to select Android 17 devices. That qualification matters when checking whether a particular phone should expose every option.

1 — Intrusion Logging

Intrusion Logging records security and network events for later investigation. Google says the records are end-to-end encrypted, securely stored in the cloud and retained on a rolling 12-month basis. The feature is optional and needs a separate manual opt-in from Advanced Protection settings.

2 — USB Protection

USB Protection is intended to reduce unauthorized physical USB access. With the protection enabled, a new USB connection defaults to charging only while the device is locked. Existing connections can continue after the screen locks. Google says this feature is available on Pixel 6 and newer devices and on select Android 17 devices.

3 — Accessibility Protection

Accessibility services can interact deeply with what appears on screen, which also makes abusive accessibility access attractive to malicious apps. In Android 17, Google says Advanced Protection restricts AccessibilityService access to verified applications categorized as Accessibility Tools. This targets a permission path that can otherwise expose sensitive screen content or enable unwanted interaction.

4 — WebGPU is disabled in Advanced Protection Mode

Android 17 adds another browser-related safeguard by disabling WebGPU while Advanced Protection Mode is active. Google presents the change as a way to reduce exposure to sophisticated browser exploits by reducing an additional hardware-accelerated attack surface for users who choose the stronger protection mode.

5 — Failed Authentication Lock

Failed Authentication Lock responds to repeated authentication failures in settings or secured apps by locking the device down. The goal is to make continued probing harder after repeated failed attempts. Like USB Protection, availability is limited to select Android 17 devices.

6 — View Supporting Apps

A new transparency page shows which installed apps check the device’s Advanced Protection status. Developers can use that status to enable their own enhanced protections for users who have turned the mode on. For users, the page provides a clearer view of which installed apps participate in the stronger protection state.

How this fits into Android 17

Advanced Protection is one part of the Android 17 security story. Independent reporting by NeoTeo summarizes the six Advanced Protection additions and their device qualifications. For users specifically evaluating protection against sophisticated attacks, Advanced Protection groups multiple defenses behind one mode while leaving Intrusion Logging as a separate opt-in.

What should you check on your phone?

First confirm that the device is running Android 17 and that Advanced Protection is enabled. Then check the Advanced Protection settings for the new options. Do not assume every Android 17 phone has identical hardware-dependent features: Google explicitly limits USB Protection and Failed Authentication Lock to select devices. If Intrusion Logging is important to you, remember that it requires its own manual opt-in.

Bottom line

The Android 17 update expands Advanced Protection with forensic logging, tighter physical-connection behavior, restrictions on accessibility-service access, a reduced browser attack surface, stronger responses to repeated authentication failures and better visibility into apps that participate in the protection mode. The exact set visible on a phone can still depend on the device.