If an app or network that you want to use needs a certificate that you don't have, you can install that certificate manually.
Digital certificates identify computers, phones, apps, and other devices for security. Just like you'd use your driver’s license to show that you can legally drive, a digital certificate identifies your device and confirms that it should be able to access something.
Important: Some of these steps work only on Android 9.0 and up. Learn how to check your Android version.
Install a certificate
- Open your device's Settings app.
- Tap Security & privacy
More security settings
Encryption & credentials.
- Tap Install a certificate
- Tap Menu
.
- Tap where you saved the certificate.
- Tap the file.
- If needed, enter the key store password. Tap OK.
- Enter a name for the certificate.
- Tap OK.
Tip: If you haven't already set a PIN, pattern, or password for your device, you'll be asked to set one up.
Remove custom certificates
Important: Removing certificates you've installed doesn't remove the permanent system certificates that your device needs to work. But if you remove a certificate that a certain Wi-Fi connection requires, your device may not connect to that Wi-Fi network anymore.
- Open your device's Settings app.
- Tap Security & privacy
-
Under "Credential storage":
- To clear all certificates: Tap Clear credentials
- To clear specific certificates: Tap User credentials
- To clear all certificates: Tap Clear credentials
Use WPA-Enterprise Wi-Fi
Important: If you’re missing any info, you may not be able to connect to your network.
You can use a WPA/WPA2/WPA3-Enterprise configuration for more security. To connect to WPA/WPA2/WPA3-Enterprise network:
- Open your device's Settings app.
- Tap Network & internet
.
- Enter the network info provided by your network administrator.
“Do not validate” changes & fixes
Important: The “Do not validate” setting option used in EAP-PEAP, EAP-TLS, and EAP-TTLS configurations has been removed for security reasons. It was removed in the Android 11 feature update release.
Can’t find the “Do not validate” optionSaved Enterprise configurations that are set up to turn off server certificate validation aren’t affected. But you can’t create new or edit saved settings.
To make your network more secure, fix less secure configurations.