Crypto Wallets on outdated Andriod phones

[UmerIdrees]

I have an Android phone that is a few years old, and in the last few months, the company has stopped providing security / OS updates to the phone. As we know, Android phones usually provide updates for three to four years, while Samsung has started providing updates for seven years in their recent phones.

Anyway, I have crypto wallets like Unstoppable in that device and also the binance apps etc. Is it safe to keep the wallet on that device, or is it time to buy a new mobile phone that can receive recent security updates?

[PX-Z]

...
Anyway, I have crypto wallets like Unstoppable in that device and also the binance apps etc. Is it safe to keep the wallet on that device, or is it time to buy a new mobile phone that can receive recent security updates?

It doesn't mean that the phone is immediately unsafe but any new vulnerability discovered like malware after that point (no security patch update anymore) will remain permanently unpatched on your device. I can say it's at least safe for 1-2 years as long as you don't download anything online, especially from untrusted sources. If you have the budget, buy a new one, and make this old device as airgapped, used for signing transaction only, so you have to uninstalled most apps, and disabled most system apps as well that is not necessary.

[Zaguru12]

I have an Android phone that is a few years old, and in the last few months, the company has stopped providing security / OS updates to the phone. As we know, Android phones usually provide updates for three to four years, while Samsung has started providing updates for seven years in their recent phones.

Anyway, I have crypto wallets like Unstoppable in that device and also the binance apps etc. Is it safe to keep the wallet on that device, or is it time to buy a new mobile phone that can receive recent security updates?

First thing I think you need to actually look out for is to confirm if the wallet has been backed up properly and then every other thing will be fixable. For me if the device actually doesn’t stop working then I don’t think you need to actually go to another device because except if the device develops problems or the wallet on it isn’t been able to update its firmware then it could be call for a new device.

I would said that the device cannot be used or classified as airgapped device because this device has actually been online before and as such doesn’t qualifies to be an airgapped device. An airgapped device in my opinion is a device that should never or had never been brought online before, so it’s disqualifies this device any day as great airgapped device

You can though continue to use your wallet on that device should any thing come up the back up is there to recover the wallet in another device

[coinlary]

Yes for surfing the Internet alone. No for just only your wallet and Binance or any other rep. exchange app.

As long as you're not doing more than just using your exchange wallet and the hot self-custody wallets, then you should be safe to some extent. Not like really safe, just make sure you're not doing more than that, and make sure you don't have much on all those wallets. It doesn't matter centralized exchange or not in this case. Mobile phone was never really that much of a good option for storage.

I will delete every browser on it  too

[virasog]

I have an Android phone that is a few years old, and in the last few months, the company has stopped providing security / OS updates to the phone. As we know, Android phones usually provide updates for three to four years, while Samsung has started providing updates for seven years in their recent phones.

Anyway, I have crypto wallets like Unstoppable in that device and also the binance apps etc. Is it safe to keep the wallet on that device, or is it time to buy a new mobile phone that can receive recent security updates?

I don't think that's much of a problem unless you install .apk files or other software from untrusted sources. Downloading software from the Play Store won't have any problem, and this holds true even if you have an updated phone with updated security patches. If you download software from unknown locations, even that new device can be compromised.

And why don't you buy a hardware wallet instead of wasting money on another phone, and that is not a foolproof solution.

[UmerIdrees]

Yes for surfing the Internet alone. No for just only your wallet and Binance or any other rep. exchange app.

As long as you're not doing more than just using your exchange wallet and the hot self-custody wallets, then you should be safe to some extent. Not like really safe, just make sure you're not doing more than that, and make sure you don't have much on all those wallets. It doesn't matter centralized exchange or not in this case. Mobile phone was never really that much of a good option for storage.

I will delete every browser on it  too

So you mean that I only use that outdated phone for storing crypto wallet and delete the browsers too, so any malware does not come into my phone if I surf the internet on the phone 

And why don't you buy a hardware wallet instead of wasting money on another phone, and that is not a foolproof solution.

Sadly, none has provided me a satisfactory answer here. Buying a hardware wallet is a good option, but since Trezor / Ledger doesn't ship directly to my country, it is a risk if I buy it from a third-party vendor ?

[coinlary]

So you mean that I only use that outdated phone for storing crypto wallet and delete the browsers too, so any malware does not come into my phone if I surf the internet on the phone  

Technically, I'm not suggesting usage  of mobile device for storing  your Bitcoin and other altcoins you like. I mentioned  already that it's  not a good choice of storage. Just keep small amounts on it  and use it for convenient transactions of small amounts.
If you need a secure storage  then get a PC and setup a cold storage

Your mobile isn't  going to be receiving update which means you will be open to vulnerabilities and there's one way to get expose to attack that could exploit those vulnerabilities which is  simply through  your browser, visiting  sites that could exploit them and downloading malwares on the mobile device.

That's  why I added "delete your browsers" , you will be left with only your exchange wallets and other hot self-custody wallet(unstoppable).
You can get a malware  by downloading a random  app on play store or other stores too so that's  why I added "reputable wallet" and stop downloading  or adding any other apps apart from the exchange and Unstoppable, delete every other  apps.

Don't  think it too much, your wallet will be fine with just that and the little amoun in it, but those wallet could also stop getting update over time and that might make your exchange wallet to stop working too.

Go through  Beginners and Help threads about recent vulnerabilities with mobile devices,  you get a lot about why you should reconsider using your phone as your main storage for your bitcoin, it's  bad.

[dkbit98]

Anyway, I have crypto wallets like Unstoppable in that device and also the binance apps etc. Is it safe to keep the wallet on that device, or is it time to buy a new mobile phone that can receive recent security updates?

I would generally not use this devices to store anything more than crypto pocket money.
Eventually old smartphones are going to be outdated, but they can be still used similar as airgapped devices with disabled all connections and internet.
Problem is that on some old phones you can't even install all crypto wallets because they are not supported anymore.
I have some ancient old smartphones so I tested this myself, but they are working very slow.

[BitMaxz]

Technically, I'm not suggesting usage  of mobile device for storing  your Bitcoin and other altcoins you like. I mentioned  already that it's  not a good choice of storage. Just keep small amounts on it  and use it for convenient transactions of small amounts.
If you need a secure storage  then get a PC and setup a cold storage

I believe it depends on how you store and use your mobile device. For example, I have never had an issue with my phone, but to keep my wallet safe, I have never connected it to the internet. I have a separate wallet where I can monitor and make unsigned transactions from my laptop or, on occasion, my extra phone, which is always online.
Their connection is via QR code when signing a transaction, and sometimes I copy the raw hash, which is way safer than using the wallet as a hot wallet.

It works just like a hardware wallet, but you don't need to connect the hardware wallet via USB.

[rat03gopoh]

or is it time to buy a new mobile phone that can receive recent security updates?

Yes, just buy a new one.
Mobile wallets aren't a priority recommendation, even if you're buying a high-end product. So, Always remember the basic security rule: use your mobile wallet as secondary crypto storage with small funds.

By the way, do you also use a PC?

[PX-Z]

or is it time to buy a new mobile phone that can receive recent security updates?

Yes, just buy a new one.
Mobile wallets aren't a priority recommendation, even if you're buying a high-end product. So, Always remember the basic security rule: use your mobile wallet as secondary crypto storage with small funds.

I'd go for a hardware wallet under $100 and just use a phone to connect and manage it. It's generally a more reliable option if security is the priority.

That said, the biggest factor is still the user. How you store your seed phrase, whether you share any sensitive info, and how careful you are when sending/receiving funds matter far more. Even the best device won't help if basic security practices aren't followed, while a very simple setup can still be safe and secures if the user knows what they're doing.

[satscraper]

I have an Android phone that is a few years old, and in the last few months, the company has stopped providing security / OS updates to the phone. As we know, Android phones usually provide updates for three to four years, while Samsung has started providing updates for seven years in their recent phones.

Anyway, I have crypto wallets like Unstoppable in that device and also the binance apps etc. Is it safe to keep the wallet on that device, or is it time to buy a new mobile phone that can receive recent security updates?

From my personal view it is better to buy  new Android to use as your everyday phone and turn your outdated one into cold storage device namely AirGap  which ^{in terms of security} could be comparable with the best hardware wallets, and move your stash from Unstoppable to this AirGap storage. By doing this, you will have your cake and eat it too.

[PX-Z]

Hey! Honestly, upgrade the phone. No security updates = known vulnerabilities that hackers actively exploit. For Unstoppable wallet especially, if your device gets compromised, those funds are gone — no recovery. Binance is safer since they have support, but still risky. In the meantime, move anything serious to a hardware wallet like Ledger. Not worth the risk! 🔐

"No security updates = known vulnerabilities that hackers actively exploit"
Not always true, there will be new virus that wont be covered to newly installed patch.

Using binance is not safer, unstoppable wallet is much safer and controllable in terms of being responsible owner of the funds and your wallet. 

Ledger is the shittiest HW out there use trezor instead.

[satscraper]

One more off-the-shelf solution to turn outdated Android phones into cold wallets is Cupcake, which complements the well-known Cake software wallet. An old phone with Cupcake installed becomes an air-gapped hardware signing device (aka cold wallet), while Cake on a newer Android device serves as the hot wallet.  We have a dedicated Cupcake thread on the forum, so anyone interested is welcome to join the discussion.

[PX-Z]

One more off-the-shelf solution to turn outdated Android phones into cold wallets is Cupcake, which complements the well-known Cake software wallet. An old phone with Cupcake installed becomes an air-gapped hardware signing device (aka cold wallet), while Cake on a newer Android device serves as the hot wallet.  We have a dedicated Cupcake thread on the forum, so anyone interested is welcome to join the discussion.

I'll consider this only if the latest version of the wallet accepts the current android version of the device OP is talking about, else this won't work. At least Android 7 is okay if google summary is right.

Also, i just heard this wallet, i checked the github and only few version was released, at least 5 of it since the app was initially released.

[satscraper]

Also, i just heard this wallet, i checked the github and only few version was released, at least 5 of it since the app was initially released.

I think this isn’t really weak point in this case, because this wallet is from the class of minimalist wallets with the simple design that focuses on the basic functions like sending and receiving. Every crypto user needs those features, and they don’t require frequent updates. So, to put it simply, stability is a mark of craftsmanship.

[BitMaxz]

I think this isn’t really weak point in this case, because this wallet is from the class of minimalist wallets with the simple design that focuses on the basic functions like sending and receiving. Every crypto user needs those features, and they don’t require frequent updates. So, to put it simply, stability is a mark of craftsmanship.

It is more likely similar to Airgap.it wallet; it's simple, but currently based on their demo, it looks like it only supports Monero for now. Compared to Airgap.it, which supports many coins. I have this Airgap vault and am still holding most of the coins that I've mined so far.

The cupcake would be more interesting if they supported more coins, at least the top 50 coins on CoinMarketCap.

[PX-Z]

Also, i just heard this wallet, i checked the github and only few version was released, at least 5 of it since the app was initially released.

I think this isn’t really weak point in this case, because this wallet is from the class of minimalist wallets with the simple design that focuses on the basic functions like sending and receiving. Every crypto user needs those features, and they don’t require frequent updates. So, to put it simply, stability is a mark of craftsmanship.

What i mean is the stability of the app version. If the audits, tests, and QA were all done properly and no issues were found, then i think it should be fine regardless of the current version.