Fact · Voice privacy and security
Citizen Lab recommends that Android sandbox keyboard apps by default, as iOS does, so they cannot send network traffic until the user grants access.
Checked against its source on October 17, 2026
In the source's own words
“Android should implement sandboxing by default for keyboard apps, similar to iOS”
Vulnerabilities across keyboard apps reveal keystrokes to network eavesdroppers, Citizen Lab, University of Toronto, 2024, Recommendations to Mobile Operating System Developers.
Open the original- What it measures
- The recommendation addresses the gap between iOS's default keyboard sandbox and the network access that Android keyboard apps can have.
- What it does not show
- A recommendation from a 2024 report, not a description of a current Android setting.