Rooted Android vs Windows Security

TL;DR

A rooted Android device can be more risky than a typical Windows desktop for banking, but it’s not automatically worse. The risk depends on what the user has done with root access and how careful they are. Windows is constantly targeted, but generally has better built-in security features and updates. Rooting removes many of Android’s protections, so extra vigilance is needed.

Understanding the Risks

1. Rooted Android: Root access gives you full control over your device, including system files. This allows for customisation but also opens doors to malware and tampering if not managed carefully.
   • Malware Access: Malware can gain complete control of a rooted device, potentially stealing banking credentials or intercepting transactions.
   • Modified System Files: Rooted devices are more susceptible to having their system files altered maliciously.
   • Security Updates: Rooting often prevents over-the-air (OTA) updates from the manufacturer, leaving you vulnerable to known security flaws.
2. Windows Desktop: Windows is a popular target for cyber attacks, but has several built-in security features.
   • User Account Control (UAC): Prompts users before making system changes, reducing the impact of malware.
   • Windows Defender/Antivirus: Provides real-time protection against viruses and other threats.
   • Regular Security Updates: Microsoft regularly releases security patches to address vulnerabilities.

Is Rooting Worse? A Comparison

Here’s a breakdown of why rooting can be riskier, and how it compares:

1. Default Security: Android without root has layers of security (permissions system, Google Play Protect). Windows also has these. Rooting bypasses many Android protections.
   • Android’s permission model restricts what apps can do.
   • Google Play Protect scans apps for malware before and after installation.
2. Attack Surface: Both have a large attack surface, but the methods differ.
   • Android: Primarily through malicious apps (especially sideloaded ones) or compromised custom ROMs.
   • Windows: Through phishing emails, drive-by downloads, and software vulnerabilities.
3. Update Frequency: Windows generally receives more frequent and consistent security updates than Android devices (especially older models).
   • Check your device manufacturer’s update policy. Some provide limited support after a few years.

Protecting Your Rooted Android Device for Banking

If you must use a rooted Android device for banking, take these precautions:

1. Use a Reputable Custom ROM: If flashing a custom ROM, choose one from a well-known and trusted developer.
2. Install a Strong Antivirus App: Use a mobile security app with real-time scanning.
   • Examples include Bitdefender Mobile Security or Norton Mobile Security.
3. Be Careful What You Install: Only install apps from trusted sources (like the Google Play Store, if possible).
   • Avoid sideloading APKs unless you are absolutely sure of their origin.
4. Enable Two-Factor Authentication (2FA): Use 2FA on all your banking accounts.
5. Monitor Your Accounts Regularly: Check your bank statements frequently for any unauthorized transactions.
6. Use a Separate Profile/User Account: Consider creating a separate user profile or app clone specifically for banking apps. This limits the potential damage if that profile is compromised.
   • Some custom ROMs offer built-in multi-user support.
7. Keep Your Device Updated (If Possible): If your custom ROM supports updates, install them promptly.

Checking for Root Access

You can check if your Android device is rooted using a terminal emulator app:

su

If the command prompts you for root access, your device is likely rooted. If it says ‘command not found’ or similar, it’s probably not.