Step 1: Review App Permissions and Admin Access
Malicious apps can silently change settings if they have excessive permissions or device administrator privileges. It's crucial to revoke these to regain control.
- Go to Settings → Security & privacy → Permissions manager. Review each permission category (e.g., Camera, Microphone, Location). If you see an app that shouldn't have access, tap on it and select Don't allow.
- For Samsung One UI, this path is similar: Settings → Security and privacy → Permission manager.
- Next, check for Device admin apps. Go to Settings → Security & privacy → More security settings → Device admin apps. Disable any unfamiliar or suspicious apps by toggling them off, then tapping Deactivate this device admin app.
- On some Android versions, particularly Samsung, Device admin apps might be under Settings → Biometrics and security → Other security settings.
Tip
Only grant microphone, camera, or location permissions to apps you absolutely trust and use frequently.
Step 2: Check for Suspicious Apps and Uninstall Them
Unwanted apps are a common vector for setting changes. Look for anything you don't recognise, or apps that have appeared recently without your knowledge.
- Open your app drawer and meticulously scroll through all installed apps. Try to remember when you installed each app.
- If you spot a suspicious app, press and hold its icon, then drag it to the Uninstall option. If that doesn't work, go to Settings → Apps → See all apps.
- Tap on the suspicious app. If the Uninstall button is greyed out, it may have Device Admin permissions (see Step 1).
- After uninstalling, restart your phone to clear any lingering processes.
Important
Some malware tries to hide. If an app has a generic name or icon, investigate it carefully before uninstalling.
Step 3: Reset Network Settings
Tampering can extend to network configurations, affecting your connectivity and privacy. Resetting these settings can resolve unexpected network behaviour.
- Go to Settings → System → Reset options.
- Tap Reset Wi-Fi, mobile & Bluetooth. Confirm your choice.
- For Samsung One UI, navigate to Settings → General management → Reset → Reset Wi-Fi and Bluetooth settings (or Reset network settings on older versions).
- This will erase all saved Wi-Fi networks, paired Bluetooth devices, and mobile data settings. You'll need to reconnect to your Wi-Fi and re-pair Bluetooth devices.
Good to know
This action does not delete any personal data on your phone, only network configurations.
Step 4: Perform a Factory Reset as a Last Resort
If all other steps fail, a factory reset will erase all data and settings from your device, returning it to its original state. This is the most effective way to eliminate persistent tampering.
- Crucially, back up all your important data first! This includes photos, videos, contacts, and documents. Use Google Drive, Google Photos, or a computer.
- Go to Settings → System → Reset options.
- Tap Erase all data (factory reset). Read the warning carefully, then tap Erase all data.
- For Samsung One UI, this is typically under Settings → General management → Reset → Factory data reset.
- You may be asked to enter your PIN, pattern, or password to confirm. Your device will then restart and begin the reset process.
- Once complete, you'll need to set up your phone as if it were new. Sign in with your Google account and restore your backed-up data carefully, avoiding suspicious applications.
Important
A factory reset is irreversible. Ensure your backups are complete and safe before proceeding. Only restore data, not apps, if you suspect an app was the source of the problem.
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers