Android 16 Gemini Flaw Lets Attackers Send Messages While Phone Is Locked

It’s an unsettling truth: a feature that was supposed to make life easier for you has become a security hole. Android 16 has a bug that lets someone with physical access to your phone use Gemini to send messages or interact with apps, while the device is locked.

How the Exploit Works

When your phone is locked and you ask Gemini to do something personal, it's usually supposed to hit a wall and ask for your PIN or fingerprint. But researchers found that if someone makes a particular, tricky multi-touch gesture when clicking “Continue” on a prompt at the exact same moment they click an "Add attachment” or app-launching button, that security wall disappears.

Once they pass that check, they can.

• Send SMS or WhatsApp messages in your name without your approval.

• You can turn app permissions on or off for Gemini. This may allow it to access things you have blocked in the past.

• Scroll through your conversation history without unlocking your device.

Google has acknowledged the issue and is working on a fix. This is a risk, especially in cases like a shared office, a lost phone in a public place or even a quick second when you leave your device unattended, as it does require physical access.

How to Remain Protected

Until that software update gets to your specific phone, you can spend a few minutes tightening up your settings and taking back some control:

1. Open the Gemini app on your mobile.

2.  Click on your profile picture or initial in the top corner.

3. Go to Settings.

4. Search for “Gemini on lock screen”

5. Your best bet: Disable “Use Gemini without unlocking” altogether.

6. The moderate option If you still want the utility, be sure to toggle OFF Make calls and send messages without unlocking.

As we bring AI into more and more of our daily lives, the line between “helpful assistant” and “security vulnerability” can be thin. This bug requires someone to literally have your phone, but the best way to ensure your device – and your private messages – stay yours is to keep your settings tight.

Are you someone who keeps the assistant features on your phone’s lock screen open, or do you prefer to keep them limited?