Google details security features in Android 7.0 'Nougat'

Google shared information on the best new security features in its next major mobile OS update, Android 7.0 'Nougat,' including a faster direct boot, streamlined software updates and enhanced integration with corporate directories.

During an hour-long Hangouts web chat for the media and select IT professionals, Google today provided a glimpse of some of the new security features in its upcoming mobile OS, Android 7.0 "Nougat," which should be available on Google Nexus devices "in a few weeks," according to the company.

The online briefing wasn't meant to be exhaustive. Instead, it provided a top-level look at a set of new security and management tools in Android Nougat and Android for Work. Here's a breakdown of some of the most notable security improvements in Nougat, for Android users and IT administrators.

Android Nougat 7.0 platform-security enhancements

1. Direct boot and stronger encryption

Android Nougat users who encrypt their phones will no longer have to enter a security code after a reboot and then wait for their devices to restart in order to use core native features. Google apps including the phone and alarm will work on encrypted phones after a reboot, but the passcode will be required to access data using those apps, such as a phone contact list.

android 7 nougat direct boot Google

New file-based encryption works at a more granular level to better isolate users and profiles in Android. And hardware-backed encryption keys are required for all new Android phones that run Nougat.

2. Stronger MediaServer and platform hardening

Google caught a lot of flack related to flaws in its Android MediaServer components that enabled the Stagefright attacks earlier this year, and it says it strengthened the MediaServer in many ways. For example, Android 7.0 Nougat gives attackers who might breach MediaServer access to fewer permissions, according to Google.

Android Nougat also requires that all devices support verified boot, so corrupt phones or tablets won't start at all, or will only grant access to "safe" apps and services after they start, Google says.

3. App security and abuse prevention

Apps on previous Android versions used to be able to share user-granted permissions with other apps much more easily, according to Google. In Nougat, the company cracked down on permission sharing between apps. And apps with device admin permissions in Android Nougat can no longer prevent users from uninstalling them or change users' PIN, passwords or codes to lock them out of their devices.

4. 'Seamless' Android updates

When Nougat software updates are available for new phones, users can choose to download and install them in a separate on-device partition, so they don't need to stop using their phones or tablets during the process. The next time they reboot their phones, the new software will auto-install much more quickly than in the past, according to the company. Unfortunately, only new phones optimized for Nougat will have access to this feature.

Google also says it removed the annoying "app optimization" step of the Android upgrade process, so Nougat devices won't be useless for 10 minutes or more after a new OS patch is applied, while apps optimize for the changes.

Android Nougat 7.0 corporate-security enhancements

Google didn't provide as many specifics about the IT security features in Nougat, but it did offer a glimpse of some of the most interesting improvements.

1. Nougat's 'always-on VPN'

An enhanced "always-on VPN" feature lets IT force certain business apps to use a VPN to connect to the web. If a VPN isn't available or can't connect, the apps won't work or share any data.

2. Android 'work security challenge'

A "work security challenge" feature lets IT set separate, complex passcodes on users' devices to protect specific work data, using Android profiles, and users can employ simpler PINs or codes to access their personal data. IT can set lock restrictions for specific apps, and admins can choose to use different looking login screens so users visually know when they log into corporate services.

3. 'Work mode' in Nougat

A new "work mode" icon in the Android Nougat dropdown menu, which looks like a briefcase, lets user disable all work related apps after hours or when they don't want to be distracted.

android 7 nougat work mode Google

4. Nougat phone and dialer tweaks

The Android 7.0 Nougat dialer component further integrates with corporate systems and directories, according to Google, and users can search both work and personal contact lists from one place. If a business user receives a call from someone in their work directory, their caller ID can be set by admins to notify them that the call is likely work related. Call logs can be separated into business and personal lists. And other UX modifications aim to make it clear when calls or contacts are personal or work related.

android 7 nougat work dialer Google

Google also said many of the work-versus-personal changes are meant to serve as a "foundation for a second phone line for business" in addition to a personal line on a single device. In fact, APIs already exist that enable certain VoIP apps to create separate phones lines within a single dialer in Android Nougat, according to Google.

5. QR code provisioning in Nougat

A new Nougat feature lets IT admins provision devices that don't support the NFC "Android bump" feature, using a QR code.

6. New remote bug reports and process logging

Enhancements to Android's remote diagnostic tools in Nougat give admins more options to request remote bug reports, though in many cases, users must approve the requests for access to potentially sensitive information.

Google said it will provide additional details on Android 7.0 Nougat and Android for work when the new mobile OS is released in the coming weeks.


Join the Good Gear Guide newsletter!

Error: Please check your email address.

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Al Sacco

Show Comments

Most Popular Reviews

Latest News Articles


PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?