The next evolution in mobile security

Every day, billions of people around the world rely on Google products to enrich their lives and provide useful features—across mobile devices, smart home devices, health and fitness devices, and more. We keep more people safe online than anyone else in the world with products that are secure by default, private by design and put you in control. As our advances in knowledge and computing grow to deliver more help across contexts, locations and languages, our unwavering commitment to protecting your information remains.

That’s why Pixel phones are designed from the ground up to help protect you and your sensitive data while keeping you in control. We’re taking our industry-leading approach to security and privacy to the next level with the Google Pixel 7 and Pixel 7 Pro, our most secure and private phones yet, which were recently recognized as the highest rated security when tested among other smartphones by a third-party global research firm.1

Pixel phones also get better every few months with Feature Drops that provide the latest product updates, tips and tricks from Google. And Pixel 7 and Pixel 7 Pro users will receive at least five years of security updates2so your Pixel becomes even more secure over time.

Your protection, built into Pixel

Your digital life and most sensitive information lives on your phone: financial information, passwords, personal data, photos – you name it. With Google Tensor G2 and our custom Titan M2 security chip, Pixel 7 and Pixel 7 Pro have multiple layers of hardware security to help protect you and your privacy. We take a comprehensive, end-to-end approach to security, with verifiable protections at every layer—the network, the application, the operating system, and multiple layers on the silicon itself. If you use Pixel for your business, this approach also helps protect your corporate data.

Google Tensor G2 is Pixel’s latest powerful processor, custom-built with Google AI, making Pixel 7 faster, more efficient and safer3. Every aspect of the Tensor G2 is designed to enhance the Pixel’s performance and efficiency for great battery life, stunning photos and videos.

Tensor’s built-in security core works with our Titan M2 security chip to keep your personal information, PINs and passwords safe. Titan family chips are also used to protect Google Cloud data centers and Chromebooks, so the same hardware that protects Google’s servers also secures your sensitive information stored on the Pixel.

And in a first for Google, Titan M2 hardware has now been certified under Common Criteria PP0084: the international gold standard for hardware security components, also used for identity, SIM cards and bank card security chips.4 This means the Titan M2 hardware meets the same strict protection guidelines trusted by banks, carriers and governments.

To achieve the certification, we underwent rigorous third-party laboratory testing by SGS Brightsight, a leading international security laboratory, and received certification against CC PP0084 with AVA_VAN.5 for the Titan M2 hardware and cryptography library from the Dutch Scheme for Certification in the Field of IT Security (NSCIB). Of all these numbers and acronyms, the part we’re most proud of is that Titan hardware passed the highest level of vulnerability assessment (AVA_VAN.5)—the truest measure of resilience to advanced, methodical attacks.

This process took us more than three years to complete. The certification not only requires chip hardware to withstand invasive penetration tests, but also requires revisions to the chip design itself and the manufacturing process. The benefit for consumers? The now certified Titan M2 chip makes your phone even more resistant to sophisticated attacks.5

Private by design

Evolving our security and privacy standards for our fast-paced world also requires new approaches. Earlier this year at I/O, we introduced Protected Computing, a toolkit of technologies that transforms how, when and where personal data is processed to protect your privacy and security. Our approach focuses on:

  1. Minimize your data footprint by reducing the amount of personally identifiable data entirely
  2. De-identifying data using a range of anonymisation techniques so that it is not linked to you
  3. Limiting data access using technologies such as end-to-end encryption and secure enclaves.

Many elements of Protected Computing can be found on the new Pixel 7:

On Android, Private Compute Core keeps your information and AI-powered personalizations private with on-device processing. Data from features like Now Playing, Live Caption and Smart Reply in Messages are all processed on the device and never sent to Google to preserve your privacy. And even backing up your device to the cloud is end-to-end encrypted using Titan in the cloud.6

With Google Tensor G2, the Pixel’s advanced privacy protection now also covers audio data from events like coughs and snoring on the Pixel 7.7 Audio data from cough and snoring detection is never saved or sent to Google to preserve your privacy.

On the Pixel 7, Tensor G2 helps protect your system with the Android Virtualization Framework, which unlocks enhanced security protections like enabling system update integrity checks to happen on the fly, reducing boot time after an update.

Extra protection when you’re online

It’s also important to help keep you safe when you use your phone to surf the web and use apps. This is where a virtual private network (VPN) comes into play. A VPN helps protect your online activity from anyone who might try to access it by encrypting your network traffic to turn it into an unreadable format and masking your original IP address. Typically, if you want a VPN on your phone, you have to get one from a third party.

To ensure more people have access to improved security, Pixel 7 and Pixel 7 Pro owners will be able to use Google One VPN at no extra cost later this year.8Google One VPN is verifiably private and lets you leverage Google’s world-class security for peace of mind when connecting online. With VPN from Google One, the Pixel helps protect your online activity at the network level. Think of it as an extra layer of protection for your online security.

VPN from Google One creates a high-performance secure connection to the Internet so that your browser and app data is sent and received via an encrypted path. A few simple taps activate the VPN to help keep your network traffic private from ISPs and hackers, giving you peace of mind when using mobile data, home Wi-Fi, and especially when connected to public networks such as a coffee shop or airport Wi-Fi. No need to worry about online intruders, hackers or insecure networks.

Unlike traditional VPN services, VPN by Google One uses Protected Computing to make it technically impossible for anyone at the network level, even VPN by Google One, to connect your online traffic to your account or identity. Google One VPN will be available at no additional cost as long as your phone continues to receive security updates. See here to learn more about VPN from Google One.

More protection and privacy with Android 13

Pixel 7 and Pixel 7 Pro have built-in anti-phishing protection from Android that scans for potential threats from phone calls, text messages and emails, and more anti-phishing protections enabled out-of-the-box than smartphones from leading competitors.9 In fact, Messages alone protects consumers from 1.5 billion spam messages per month.

Android also resets permissions for apps you haven’t used in a while. In a typical month, Android automatically resets more than 3 billion permissions, affecting more than 1 billion installed apps. Similarly, if you use clipboard on Android 13, your history will be automatically deleted after a period of time. This blocks apps running in the foreground from seeing old information that you previously copied.

You are in control


The core of your security is knowing that you are in control. You are always in control of your settings and devices across all our products. With Android 13 coming through a feature drop soon, the Pixel 7 and Pixel 7 Pro give you additional ways to maintain control over your privacy and what you share with first- and third-party apps. With Quick Settings, you can react to security issues as they arise, or review which apps are running in the background and easily stop them. You have a single destination to review your security and privacy settings, risk levels and information, making it easier to manage your security status.

With this new experience, you can review actionable steps to improve your security status, such as revoke a permission or app. This page will also have new action cards to inform you of any security risks and provide timely recommendations on how to improve your privacy. And with a single tap, you can give or remove permissions for data you don’t want to share with compatible apps. This will soon come first to Pixel devices later this year and other Android phones soon after.

Verifiably secure

As data processing expands to more devices and uses, Google is committed to innovating in security and being transparent about the processes we take to get there. We are a leader in verifiable security by not only having products tested against real-world threats (such as advanced spam, phishing and malware attacks), but also by publishing the results of penetration tests, security audits and industry certifications on across our Pixel and Nest products.

Another way to confirm our security is through our Android and Google Devices Security Reward Program, where we reward security researchers who find vulnerabilities across products including Pixel, Nest and Fitbit. Last year on Android, we awarded nearly $3 million dollars, which created a valuable feedback loop between us and the security research community and, most importantly, helped us keep our users safe.

To learn more about the Pixel 7 and Pixel 7 Pro, check out the Google Store.

Notes

William

Leave a Reply

Your email address will not be published. Required fields are marked *