Google’s October 1, 2026 announcement describes six newer or expanded Android Advanced Protection capabilities, from optional event logging to limits on USB connections and AccessibilityService access. Google says Advanced Protection is a device-level mode that brings multiple protections together under one setting; protections such as Google Play Protect and Scam Detection cannot be disabled while the mode is enabled.

What the six features do

Google describes the features and their scope as follows:

FeatureWhat it doesGoogle’s stated scope
Intrusion LoggingRecords security and network events. Google says the logs are end-to-end encrypted and stored in the cloud.Android 17 devices; requires a separate opt-in
USB ProtectionLimits new USB connections to charging while the device is locked; existing connections persist after screen lock.Pixel 6+ devices and select Android 17 devices
Accessibility ProtectionRestricts AccessibilityService access to verified apps categorized as Accessibility Tools.Android 17 devices
Disable WebGPUTurns off WebGPU in Advanced Protection Mode.Android 17 devices
Failed Authentication LockLocks down the device after repeated failed authentication attempts in settings or secured apps.Select Android 17 devices
View Supporting AppsShows installed apps that check Advanced Protection status.Android 17 devices

Intrusion Logging and USB connections

Intrusion Logging is optional: users must turn it on separately in Advanced Protection settings. Google says it retains logs on a rolling 12-month basis, then automatically deletes them. Google also says the logs are protected against tampering and accessible only to the user.

USB Protection distinguishes between a connection already in place and a new one. If a supported phone is locked, a newly connected USB device is limited to charging. A connection established before the screen locks remains active afterward.

Accessibility, WebGPU and app status

On Android 17, Accessibility Protection restricts AccessibilityService access to verified applications categorized as Accessibility Tools. Apps that rely on this service must meet those conditions to retain access under the mode.

Disable WebGPU turns off WebGPU, a technology for high-performance graphics in web content. Google says disabling it reduces exposure to browser-based attack surfaces.

Failed Authentication Lock locks down a device after repeated unsuccessful authentication attempts in settings or secured apps. View Supporting Apps lets users see which installed apps check the mode’s status. Apps can also use Android’s AdvancedProtectionManager API to query whether Advanced Protection is on and register for status changes; developers can use that status to activate app-level protections.

Google’s stated device availability

Google’s general availability note lists the capabilities for Android 17 devices, with USB Protection and Failed Authentication Lock limited to select Android 17 devices. Google separately lists USB Protection for Pixel 6+ devices.