Why you should power off your phone once a week – according to the NSA

Your pricey smartphone can be hit by many security threats, from phishing to malware to spyware. All it takes is one successful attack to clobber your phone, compromise your data, and even steal your identity. So, how do you protect yourself?

In a Mobile Device Best Practices report, the National Security Agency (NSA) offers tips to thwart hackers and attackers from assaulting your mobile device. One method is as simple as turning your phone off and on.

Spearphishing attacks can target your phone to install malware, while zero-click exploits can infect your device without any interaction on your part. The NSA’s advice? Power your phone off and then back on at least once a week. 

Also: Why you don’t need to pay for antivirus software anymore

This simple action can make it more difficult for hackers to steal information from your phone, though the agency cautions that this will not always prevent an attack.

The NSA cited several other threats that can impact your mobile device in its report.

Also: Can your old PC even handle the Windows 11 upgrade? Here’s how to tell

Malicious apps can infect your phone. Malicious Wi-Fi networks can intercept and redirect traffic from your device. Spyware can monitor the audio and video conversations on your phone. Hackers with remote access to your device can collect calling or texting data. Someone with physical access to your phone, even briefly, would, of course, be able to install malware or spyware.

There are several ways to protect yourself. The NSA suggests:

• Update your apps. Be sure to update your apps and operating system with the latest security patches.
• Use official app stores. Install apps only from official stores, such as Apple’s App Store or the Google Play Store.
• Avoid clicking on links or file attachments in emails and text messages, as those are common ways to trigger malware.
• Watch out for public Wi-Fi networks and avoid joining them when possible. To add to the NSA’s advice here, I recommend using a VPN whenever you join a public network.
• Disable Bluetooth. Turn off Bluetooth when you’re not using it to prevent an unauthorized device from connecting to your phone.
• Use a secure passcode. Create a strong passcode with at least six digits to lock and unlock your phone.
• Leverage biometrics. Enable your device’s built-in facial or fingerprint scanning for greater security and convenience.
• Use trusted accessories. Use only original charging cords or charging accessories from a trusted manufacturer. Avoid public USB charging stations.
• Turn off location services when not needed.

Beyond adopting the NSA’s suggestions, you can also turn to a dedicated app to help with your mobile security. One app worth installing is iVerify, a security scanner that will scour your device for malware and make sure you’re using the basic security features on your iPhone or Android phone.

Also: 7 password rules to live by in 2024, according to security experts

“Threats to mobile devices are more prevalent and increasing in scope and complexity,” the NSA said in its report. “Users of mobile devices desire to take full advantage of the features available on those devices, but many of the features provide convenience and capability but sacrifice security. This best practices guide outlines steps the users can take to better protect personal devices and information.”

This article was originally published on May 31, 2024, and updated on November 25, 2024.