What is Google Play Protect?

What is Google Play Protect?

Google Play Protect is the malware protection built into every Android phone that ships with the Google Play Store. It checks apps before you install them from Play, scans the apps already on your phone, and looks at apps installed from other sources too. When it finds something harmful it warns you, and in some cases it switches the app off or removes it.

It is not an app you can find in your app drawer. Play Protect runs inside Google Play services, and you reach its screen through the Play Store: tap your profile icon, then Play Protect. That screen shows when the last scan ran, lets you start one, and lists any problems it found.

Google's developer documentation describes the on-device side in more detail: scanning at install time, periodic scans of installed apps, checks of apps from unknown sources and, on recent phones, live threat detection that watches for apps behaving suspiciously after installation. Play Protect also covers device certification, the check that tells apps your phone runs a genuine, tested version of Android with Google apps.

Can I disable it?

You can turn off its app scanning from the Play Store, but you cannot remove it, and Google recommends you leave it on. Google's help page gives the steps: open the Play Store, tap your profile icon, tap Play Protect, open Settings (the gear icon), then turn off "Scan apps with Play Protect". The same screen has a second switch, "Improve harmful app detection", which controls whether unknown apps are sent to Google for analysis.

Turning off scanning removes a layer of protection against apps that steal passwords, send premium texts or show fraudulent ads. A common reason people want to switch it off is a warning on an app they installed from a website. You do not need to turn Play Protect off for that: the warning screen usually offers more details and an option to install anyway.

Play Protect itself cannot be disabled separately, because it is part of Google Play services and the Play Store. Disabling either of those packages breaks far more than Play Protect.

Does it drain battery or data?

Its battery use is small: scans run when you install an app and at intervals in the background, and most of the checking happens against information Google keeps in the cloud rather than through heavy work on the phone. Because it runs inside Play services, any battery it does use is counted under Google Play services, not under a "Play Protect" entry.

Data use is also small. The exception is the Improve harmful app detection setting: when it is on, apps installed from outside the Play Store may be uploaded to Google for analysis, which uses data in proportion to the app's size. You can turn that setting off and keep scanning on.

Why did it just update?

Play Protect updated because Google improves it through updates to Google Play services and the Play Store, not through a separate app. Those updates come through Google Play every few weeks and add new detection methods, new warning screens and changes to how sideloaded apps are handled.

The information about which apps are harmful is largely kept on Google's servers, so protection keeps improving between app updates. If you see "Play Protect" mentioned in update notes, it is part of a Play services or Play Store release.

Which packages are behind it?

Two packages carry Play Protect:

• com.google.android.gms is Google Play services, which runs the scanning and the protection features.
• com.android.vending is the Google Play Store, which hosts the Play Protect screen, its settings and the scan button.

Both are core packages on any phone with Google apps and should stay enabled.

If something goes wrong

If Play Protect blocked an app you trust, first check where the app came from. Apps from the Play Store are already checked; if one is flagged, update it, because developers often fix the cause quickly. For apps from other sources, tap the warning's details link to see why it was flagged, and install only if you are sure of the source.

If the Play Protect screen says your device is not certified, open the Play Store, tap your profile icon, go to Settings > About and look at "Play Protect certification". Phones sold with Google apps are certified; an uncertified result usually means modified software, and some banking and payment apps will refuse to run.

If scans never finish or the Play Protect page shows errors, update both the Play Store and Google Play services, then restart. Clearing the Play Store's cache (Settings > Apps > Google Play Store > Storage > Clear cache) fixes most stuck pages.

If someone disabled the Play Store or Play services with ADB, Play Protect is off too. Turn them back on:

adb shell pm enable com.android.vending
adb shell pm enable com.google.android.gms