Android 14 FAQs

Advanced security & compliance

Enhanced PIN security

Does this apply to the Work Profile PIN?

No. The 6-digit PIN is only set to default on the device PIN.

Does this mean unmanaged devices will also default to a 6-digit PIN?

Yes, all Android 14 devices will encourage users to set a 6-digit PIN by default.

Will employees be able to set a shorter PIN if allowed by IT admins?

Yes, but as a security best practice, Google recommends 6-digit PINs for Android devices.

Managed ultra-wideband (UWB)

What is ultra-wideband (UWB)?

Ultra-wideband (UWB) is a wireless communication protocol that can use a very low energy level for short-range, high-bandwidth communications over a large portion of the radio spectrum. It is used to capture highly precise spatial and directional data.

Why do we need to stay compliant with NIAP?

The National Information Assurance Partnership (NIAP) is an initiative by the US government that manages the security testing requirements of commercial technology, products, and services such as the ultra-wideband (UWB). NIAP requirements (from the PP_MDF_V3.3) are used as a baseline set of security requirements for Android devices, ensuring Android devices are able to meet the business needs for any customers.

What is the default setting for UWB?

UWB is enabled on Android devices by default.

Can UWB be managed on personal devices?

No. IT admins are only able to manage UWB radios on company-owned devices.

Protect devices with 2G connectivity controls

Can an employee turn off 2G if traveling to an 'at-risk' area?

Yes. When 2G connectivity is not managed by policy, users can turn off 2G in the device settings.

Security policies for credential managers

What is a credential manager?

Credential Manager brings together support for passkeys and combines it with traditional authentication methods such as passwords, Sign in with Google etc. This allows users to sign in to apps and websites with a biometric sensor (such as a fingerprint or facial recognition), PIN, or pattern, freeing them from having to remember and manage passwords.

Is it possible to manage the credential manager on the personal profile for Work Profile in company-owned devices?

At the moment, this only provides management of the credential manager in the Work Profile. The personal profile can use any credential manager and it has no IT admin control.

Can the use of all credential managers be blocked by policy?

Yes, IT admins can block all credential managers in the Work Profile and on company-owned devices.

If an allowlist is not set, what is the default state?

Employees are able to use any credential manager on the device.

Elevated employee experiences

Save screenshots to Work Profile

My organization doesn't allow screenshots on work devices. Will work screenshots automatically be allowed when our devices upgrade to Android 14?

No, the existing screenshot data loss prevention policies remain in effect after upgrading to Android 14. If screenshots were previously disabled, IT admins must enable work screenshots in their EMM policies.

Improved cross-profile experience

Cross-profile messaging experience

I could already see my work contacts in caller ID and when searching in my personal contacts app. What does this feature change?

This new API now provides a way for 3rd party apps (i.e. WhatsApp) to gain read-only access to work contacts

Will personal profile apps automatically be able to access work contacts in Android 14?

This feature is an API that lets developers build access to work contacts in their apps. If allowed by EMM policy and user granted permissions, apps in the personal profile can have read-only access to display work contacts.

Will apps in the personal profile be able to add contacts to the Work Profile?

No. This API has read-only access, so personal apps can only list work contacts.

Cross-profile app link experience

How can end users access this feature?

This is just a UI change and no partner (EMM or OEM) updates or IT admin actions are needed to utilize this feature.

Does this change mean that any Work Profile links can be opened by an app in the personal profile?

No. IT admins can set policies restricting which Work Profile links can be opened in the personal profile. This feature improves the user experience of opening links that are allowed across profiles.

Discoverable Work Profile settings

Will this also work on all OEM devices with their own UI settings?

This change is implemented in the Android Open Source Project (AOSP) and is available to all OEM devices.

In-app profile switching for Google apps

Does this feature only work in Google apps?

Yes, in-app profile switching is specifically available in Google apps. Third-party developers can build similar functionality into their apps.

How is this different from the ability to switch between different accounts in Google apps?

If there are multiple Google accounts on a device, you can easily switch between accounts by swiping vertically on your profile picture in a Google app. This feature adds the ability to also switch between the work and personal profile in those apps by swiping sideways on your profile picture.

Partial screen share

Will this change allow for the ability to only allow screen capture of specific apps by EMM policy

IT admins have the ability to disable screen capture at the device or profile level. This feature adds the ability for employees to select that only a specific app is shared during a screen share session. This reduces the risk of accidental data leakage via screen share.

When I accidentally switch to another app, will partial screen share automatically stop or will it continue to share a blank screen?

If the employee switches to another app, a blank screen will be displayed but the screen share session will still be active.

Was this helpful?

How can we improve it?