On August 7, 2026 at 3:47 a.m. ET, Android Authority reported new details about how Google is refining security for Android 17. Analysis of the latest code in the Android Canary 2608 build shows a shift in how Quick Settings tiles function when the phone is locked. Earlier versions had proposed locking all settings except for the flashlight, but this new update appears to offer a more balanced approach.
The new locked toggles
In the Android Canary 2608 build, Google has identified specific settings that require the user to unlock their device before making changes. These include Wi-Fi, Bluetooth, Mobile Data, and Airplane Mode. These particular functions are often used by individuals who steal devices to cut off network tracking and reduce the chance of being located.
Earlier versions of Android 17, including the QPR 1 Beta 5 build, had proposed a stricter approach. That code aimed to block all Quick Settings except the Flashlight tile. In that version, a string read, 'To prevent unauthorized changes, you must unlock your device to use any Quick Settings tile except the Flashlight.' This was seen as an aggressive security measure but raised concerns about usability.
What stays accessible
Certain functions are being left accessible even when the device is locked. These include tools like the flashlight, screen auto-rotate, and battery saver. These tools do not affect the phone's ability to be tracked or monitored, and they remain available for users who may need them quickly without unlocking their device.
The updated code in the newer builds states: 'To prevent unauthorized changes, you must unlock your device to use Wi-Fi, Bluetooth, Mobile Data, and Airplane Mode.' This wording indicates Google's attempt to balance security and user experience. By only limiting access to a few high-risk settings, the company seeks to reduce potential security threats without overburdening users with constant lock screen restrictions.

