Security & Privacy

How to Lock Individual Apps on Android and Keep Intruders Out

Your lock screen stops strangers, but not the people you hand your unlocked phone to. Per-app locks close the gap.

MOMira OseiAndroid Editor
August 18, 2026 4 min read
An Android phone on a dark surface with glowing fingerprint and padlock icons above the screen
Security & Privacy

We independently evaluate recommended products and services. When you buy or install through links on this page, we may earn a commission. This never affects our testing or verdicts.

Key takeaways
  • A lock screen protects a sleeping phone; app locks protect an unlocked one.
  • PIN, knock code, fingerprint and biometrics each suit a different threat.
  • Start with banking, messaging, gallery, email and social apps.
  • The best app locker is the one you actually leave enabled.

Most Android security conversations begin and end with the lock screen. That is a mistake. The lock screen only works when the phone is asleep, and most privacy leaks happen while the device is awake: a child opening your banking app, a friend swiping through your gallery, a colleague borrowing the phone to make a call and reading a notification thread. Per-app locks are the layer that fixes those moments.

Why the lock screen is not enough

A strong PIN or fingerprint is excellent at stopping someone who picks your phone up off a table. It does nothing when you unlock it yourself and hand it across. Lending your phone for a photo, a navigation check or a quick game is a social transaction built on trust, but trust is not a security model. App locking lets you keep the convenience of an unlocked phone while controlling which doors are open.

  • Screen locks fail the moment you unlock and hand the phone over.
  • Notification previews, recent apps and quick settings all leak data past a lock screen.
  • Guest profiles help, but most people never enable them.
  • App locks add a second gate without changing how you use the phone.

The four ways to lock an app

A good app locker gives you options, because different situations call for different trade-offs between speed and secrecy. PIN codes are reliable but visible. Knock codes are discreet and harder to shoulder-surf. Fingerprint and biometric unlocks are fast, but they can be compelled in some jurisdictions and may not work with wet fingers or gloves.

  1. 1.PIN code: the baseline. Easy to remember, easy to enter, obvious to anyone watching.
  2. 2.Knock code: tap a secret pattern on a blank grid. Much harder for someone beside you to read.
  3. 3.Fingerprint: fast and convenient, but tied to hardware and less deniable.
  4. 4.Biometrics: face unlock where supported; use it only if your device resists spoofing.

Which apps to lock first

You do not need to lock every app. Doing so turns your phone into a chore. Lock the apps that contain data you cannot explain away, reset easily, or afford to expose. For most people that is a short list: banking and payment apps, messaging apps, email, the photo gallery, and any social app with direct messages.

  • Banking and payment apps: obvious, and often required by the apps themselves.
  • Messaging and email: these are the archives of your private conversations.
  • Gallery and file managers: photos and downloads are the fastest way to violate someone's privacy.
  • Social apps with DMs: public feeds are fine; private threads are not.

Mistakes that defeat app locks

App locks are only as strong as the habits around them. The most common failure is using the same PIN as the lock screen, which means anyone who shoulder-surfs the device PIN now owns every locked app. Another is disabling the lock temporarily and forgetting to turn it back on.

  1. 1.Never reuse your device PIN as an app-lock PIN.
  2. 2.Set re-lock on app switch, not after a timeout.
  3. 3.Lock the app store so the locker itself cannot be uninstalled casually.
  4. 4.Disable uninstall permissions or hide the app from the launcher where supported.
The goal is not to make your phone Fort Knox. It is to make casual snooping more trouble than it is worth.
— MobileStack Insights editorial desk

Keep it lightweight

Some app lockers are packed with features you do not need: RAM cleaners, battery optimisers, browser locks and notification interceptors. Those extras drain battery, request broad permissions, and often make the app feel like bloatware. A lighter locker that does one thing well is easier to trust and more likely to stay installed.

Set it up once, lock the five apps that matter, choose an unlock method that fits your daily rhythm, and leave it running. The best privacy tool is the one that becomes invisible.

Related articles

Newsletter

Get the latest mobile tips

One email a week: storage wins, security settings worth changing, and the utilities that survived our testing.

No spam. Unsubscribe in one click.

15 in-depth guides and counting.