How to Configure Cellular Network Security in Android 15 to Block Unencrypted Mobile Connections

Modern mobile communication standards like 4G LTE and 5G employ robust mutual authentication and cryptographic ciphers to protect voice calls, text messages, and data packets from interception. However, cellular hardware remains fundamentally backward-compatible with legacy telecommunications protocols. Sophisticated attackers, surveillance operators, and criminals exploit this backward compatibility by deploying cell-site simulators (commonly known as Stingrays or IMSI catchers). These rogue base stations trick nearby phones into connecting to fake antennas, forcing connections to downgrade to unencrypted networks or legacy 2G bands. To neutralize this threat, Android 15 introduced a dedicated Cellular Network Security menu.

What Is Cellular Network Security in Android 15?

Android 15’s cellular security suite gives smartphone users granular control over their cellular baseband modem behaviour:

• Unencrypted Cellular Blocking: Prevents your phone from transmitting data over mobile networks that fail to encrypt communications or operate with ciphers disabled.
• Rogue Base Station Defense: Rogue IMSI catchers frequently advertise cellular network flags with zero encryption. Android blocks data transmission on these untrusted links immediately.
• Legacy 2G Disablement: Closes the door on obsolete 2G (GSM) cellular protocols that lack mutual tower authentication and rely on cracked encryption algorithms (like A5/1).
• Automatic Security Notifications: Alerts the user when a carrier network attempts to force an unencrypted voice or data session.

Hardware and Carrier Compatibility

Cellular Network Security controls require underlying baseband modem support implemented via Android 15’s updated Radio Interface Layer (RIL) hardware abstraction layer (HAL v2.0+). The capability is natively supported on Google Pixel 6, 7, 8, and 9 series devices, alongside compatible flagship hardware running Android 15 from Samsung, Motorola, and Xiaomi.

How to Access and Configure Cellular Network Security

Follow these steps to audit and harden your cellular connection:

1. Launch the Settings app on your Android 15 smartphone.
2. Tap on Network & internet.
3. Select SIMs and tap on your active mobile carrier profile.
4. Scroll down the cellular configuration page and select Cellular network security.

Inside this menu, you will encounter two primary security toggles designed to safeguard your connection.

Step 1: Disable Unencrypted Cellular Connections

Toggle on the master switch labelled Block unencrypted connections (or Require encrypted connection):

Settings > Network & internet > SIMs > [Your Carrier] > Cellular network security > Block unencrypted connections

When this feature is active:

• Your device refuses to transmit cellular internet data over base stations that do not enforce cryptographic transport encryption.
• If an attacker operates a rogue Stingray tower that attempts to downgrade security parameters, Android immediately severs mobile data.
• Emergency Call Exception: By international regulatory standards, emergency phone calls (e.g. 999, 112, 911) will still route through any available cellular mast regardless of encryption state.

Step 2: Disable 2G Connectivity Completely

Legacy 2G networks have two fatal security flaws: they do not authenticate base stations to phones (allowing any portable radio to pretend to be a carrier tower), and their encryption ciphers can be cracked in real time on standard consumer laptops. Disable 2G across all carrier profiles:

1. In the same cellular settings menu, scroll down to Allow 2G.
2. Toggle the switch to the Off position.
3. A confirmation prompt will explain that your phone will now connect exclusively to 4G LTE and 5G networks. Confirm your choice.

Configuring Cellular Cipher Notifications

Android 15 also provides an alert setting labelled Cellular cipher transparency (or Notify when unencrypted). When enabled, your phone posts a high-priority warning notification if a cellular mast drops encryption levels during voice calls, giving you immediate situational awareness if you enter an untrusted environment.

Understanding Potential Coverage Trade-offs

Enforcing cellular encryption provides ironclad privacy against interception. However, keep in mind:

• In remote rural regions or developing areas where older regional carriers still rely on legacy unencrypted cell repeaters, mobile internet may drop until you reach modern coverage.
• If you travel internationally to areas lacking 4G/5G infrastructure, you may need to temporarily re-enable 2G to receive basic SMS and phone calls.