[Question] MiUI security

[libert19]

I use mobile to store and access crypto related things. I just find it convenient.

I have always liked using vanilla android but my mind is kind of getting attracted towards recently launched poco x3 as it is giving great specs for the price.

The only thing I am confused with is, it has custom android (MiUI)I am aware that it offers great customization but bit worried on security part.

Your thoughts?

[1715267571]

1715267571

[1715267571]

1715267571

[Rikafip]

I am using Xiaomi mobile phone with MiUi for the last two and half years, and I have no complaints in that regard so far. I am not a security expert, but somehow I doubt that they are any less secure than android version you can find on other phones. And yeah, Xiaomi offers a lot for the money, they are the kings of  budget-medium segment.

Just to add that i am not storing a lot of crypto on the phone, and even on those rare occassions when I do, it is for very short period of time, usually from my home until i reach BTC ATM or vice versa so its like up to 1 hour. Generally I don't think that it is a good idea to store sensitive crypto related info on the phone, no matter the OS. On the other hand, I am accessing this forum on the phone quite a lot, and again no issues whatsoever.

[hd49728]

With mobile devices, you are facing more risks than laptop or computers.

Losing your phone (by pickpockets, absent-minded in public places, etc.)
Phone can be broken (by water, falls, and more physical damages).
Wrong sendouts when you do it on phones.

I don't see people complain on MiUI so you can be fine with that operating system but with risks are said, the fund you store on your phone should not be big or all of your capital. Just in case!

[mk4]

Xiaomi and MIUI might probably not be the best in terms of security, but chances are, you'll be totally fine as long as you don't do something stupid like save your wallet's recovery seed on your phone or install random APKs that you download on shady websites or something similar. In the first place, in my opinion, security still mostly depends on the person using the device.

As for privacy, that's another topic. I have no data or proof to show you, but I'd automatically be skeptical with Chinese products when talking about privacy(because CCP). You're free to install custom ROMs with potentially better privacy though. I'm personally for iPhones and Android custom ROMs like GrapheneOS[1] and CopperheadOS[2](though unfortunately both ROMs are more for Samsung and Google Pixel phones).

[1] https://grapheneos.org/
[2] https://copperhead.co/android/

[pakhitheboss]

I think this topic should be shifted to Off topic section

I would never recommend you to hold your crypto assets on a mobile phone that runs on Android. Security-wise Android has got a lot of security issues. iOS is the best operating system when your priority is security. I have used android in the past and recently moved over to the iOS and I can easily see the difference.

All phones get their components from china and they control more than 80 percent of the app market so it does not make any difference whether you are using a chines phone or not.

[malevolent]

I'd stick with what's tried and tested, i.e. hardware wallets and/or using a separate air-gapped computer for transaction signing. Privacy issue being harder to overcome on a smartphone aside, even if MIUI is secure (is it?), how long is it going to keep receiving security updates?

[joniboini]

I think there are some choices for you:
1. Unlock the bootloader when it's available, replace the recovery, install a custom rom focused on privacy or something similar.
2. Buy a portable hardware wallet like Keycard or Satochip that supports NFC. This will allows you to manage your wallet without directly touching your private key/seeds since it will be stored on the NFC card.
3. Use your old phone for managing your cryptos, use your new one for other stuff or for a hot wallet that you are prepared to lose.

[mk4]

just a suggestion from me, don't save crypto assets on a smartphone.  choose proper storage and indeed specifically for crypto.

I'd say unrooted/unjailbroken mobile phones are mostly better for low-amount crypto storage compared to desktop devices.

because I lost my smartphone and I no longer have access to my assets

It ain't going to matter whatever device you use to store your coin's keys if you don't write down a backup of your wallet's recovery seed, which was the reason why you weren't able to gain back access to your assets.

[Fatemablabla]

I am using Xiaomi Poco F1 for almost 22months now. And I am totally satisfied with it what it gives in the price. I'm using the official global version of Miui non rooted. With this I'm not having any issues so far. I have got complain from other Miui users that miui shows ads on the phone but on my poco F1 I didn't see it still.

Btw I'm Storing my private keys in the notes app on my mobile which is connected with Mi cloud. So, if I lost the mobile I still can recover it on any type of device.

[mk4]

Btw I'm Storing my private keys in the notes app on my mobile which is connected with Mi cloud. So, if I lost the mobile I still can recover it on any type of device.

Trust me when I say that this is a huge disaster waiting to happen. There's a reason why a lot of people in the cryptocurrency space suggest against storing your private keys digitally; and storing the keys on some company's servers is like 10x worse.

[malevolent]

I am using Xiaomi Poco F1 for almost 22months now. And I am totally satisfied with it what it gives in the price. I'm using the official global version of Miui non rooted. With this I'm not having any issues so far. I have got complain from other Miui users that miui shows ads on the phone but on my poco F1 I didn't see it still.

Btw I'm Storing my private keys in the notes app on my mobile which is connected with Mi cloud. So, if I lost the mobile I still can recover it on any type of device.

You should be able to disable the ads in the settings (you have to turn it off in more than one place).

But I'd be wary of storing any private keys on a phone let alone in the cloud in their unencrypted form.

[AakZaki]

You don't need to worry about the MiUI used, even though the UI has been customized, the security is also more improved.

I am currently using a Xiaomi smartphone and become my daily driver. I am satisfied with the performance of smartphones made by xiaomi, including the poco phone too.

About the security problems that exist in smartphones, it usually includes a more sophisticated security system and works with the best Antivirus vendors. Smartphone security is your own responsibility.
Don't store all your crypto assets on a smartphone, it's better to store it in a more secure hardware wallet.
Do not download applications that are not clear, because usually a lot of strange applications that infiltrate and disguise as popular applications.