Safe ways to install applications to avoid malware
Mobile applications have become an integral part of daily life, ranging from communication and banking to shopping and entertainment. However, the ease of downloading apps can also create vulnerabilities for malware if users do not pay attention to the source of the application and the permissions requested.
Malware is malicious software that can be used to steal data, disrupt devices, or provide access to unauthorised parties. Therefore, caution must be exercised even before an application is installed.
How can you safely install applications to keep your phone protected? Here is an explanation.
- Download applications from official stores
The simplest step is to download applications through official stores such as the Google Play Store for Android and the App Store for Apple devices. Google Play Protect automatically checks applications from Google Play before they are downloaded and can also scan applications from other sources. If it finds potentially dangerous applications, the system can issue warnings, disable, or even delete them.
On Apple devices, the App Store also implements automatic checks and human reviews of applications. Apple also has mechanisms to detect third-party applications known to contain malware.
- Do not arbitrarily install APKs from the internet
Android users sometimes download APK files directly from websites, chat groups, or links shared via social media. This method, known as sideloading, carries greater security risks compared to downloading from official app stores. Google noted that throughout 2025, Play Protect blocked 266 million attempts to install risky applications and helped protect users from 872,000 high-risk applications.
Starting from September 2026, official Android devices in Indonesia will also begin implementing developer verification for applications downloaded from participating app stores. This step is designed to help ensure that applications originate from developers whose identities have been verified.
- Check the developer’s name before downloading
Do not merely look at the application’s name and logo. Also check who the developer is, the number of downloads, user reviews, the date of the last update, and the application information. Malicious applications are sometimes created to resemble popular apps, including using similar names, logos, or appearances. Therefore, ensure the chosen application truly comes from the appropriate developer. Developer information and application details can also help users determine whether the application’s functions are logical relative to the permissions it requests.
- Pay attention to the permissions requested by the application
After an application is installed, do not immediately grant all requested permissions. Check whether access to the camera, microphone, contacts, location, SMS, or storage is actually necessary to run the application’s functions. For example, a simple calculator app requesting access to contacts or the microphone is suspicious. If a permission is unrelated to the app’s primary function, users can deny or revoke that permission through the device settings. The recommended principle for device security is to grant as minimal access as possible, according to the application’s needs.
If your phone issues a warning that an application is potentially dangerous, you should not force the installation or open the application. Google Play Protect can prevent the installation of certain unverified applications that use sensitive permissions often exploited in scams. Meanwhile, Apple advises users to delete applications if the device displays a warning that the application contains malware.
- Regularly update systems and applications
Security does not end once an application is successfully installed. Operating systems and applications need to be updated regularly because updates can fix security loopholes found in previous versions. Users should also enable automatic updates if available. Mobile device security guidelines from CISA recommend regular updates to operating systems and applications to reduce the risk of exploitation of known vulnerabilities.
- Delete suspicious applications
Changes in phone behaviour after installing an application should also be noted. For instance, if the device suddenly becomes very slow, the battery drains faster, applications frequently crash, unusual advertisements appear, or there is activity not performed by the user. If these issues arise after installing a specific application, users should consider deleting that application and performing a security check on the device. CISA also suggests that users monitor unusual application behaviour as a sign that requires attention.
With more activities being conducted via mobile phones, security when installing applications cannot be taken lightly. Choosing official app stores, checking developers, limiting permissions, paying attention to security warnings, and regularly updating devices are simple steps that can help reduce the risk of malware.