What remote access means and why it matters

Remote access means someone else can see your phone's screen, control it, or pull files from it without being in the same room. This can happen through spyware apps, compromised passwords, unsecured Wi-Fi networks, or social engineering — where someone tricks you into installing something or handing over credentials. The person doing it might be a partner, a family member, a scammer, or someone who gained access through a data breach.

The risk is real but manageable. Most remote access happens because of weak passwords, unpatched software, or apps you installed yourself (sometimes without realizing what permissions you gave them). A smaller number of cases involve sophisticated spyware, which is harder to detect but also less common unless you are a journalist, activist, or high-profile target.

The steps below address the most common entry points. If you believe someone with physical access to your phone installed spyware, or if you suspect a partner is monitoring you and you are in an unsafe situation, contact the National Domestic Violence Hotline at 1-800-799-7233 or text START to 88788. They can help you plan safely.

Key Takeaways

  • Change your passwords from a different device (computer or tablet), using a strong password you have never used before, and enable two-factor authentication on accounts that offer it.
  • Check your phone's installed apps for anything unfamiliar, especially apps with broad permissions like "Device Administrator" or access to all your files and contacts.
  • Turn off location sharing, disable remote management features, and update your phone's operating system to the latest version available.
  • Review your cloud account settings (iCloud, Google Account) to see what devices are signed in and remove any you do not recognize.
  • If you cannot identify the source of access or suspect physical tampering, a factory reset is the most reliable way to remove unknown software.

Change your passwords from a different device

If someone has remote access to your phone, they may be watching what you type. Change your passwords on a computer, tablet, or library computer instead — not on the phone itself. Start with email, because your email account is the master key: whoever controls it can reset passwords for everything else.

Make each new password at least 16 characters long, mixing uppercase and lowercase letters, numbers, and symbols. Do not use words from a dictionary, your name, your birthday, or anything someone who knows you could guess. A passphrase like "BlueSock7!Pencil$March" is stronger than "P@ssw0rd123" because it is longer and less predictable.

After you change your email password, go into your email's security settings and enable two-factor authentication (also called 2FA or two-step verification). This means that even if someone has your password, they cannot log in without a code sent to your phone or generated by an authenticator app. Use an authenticator app like Google Authenticator, Microsoft Authenticator, or Authy rather than SMS codes when possible — SMS can be intercepted, though it is still better than nothing.

Check your phone's installed apps and permissions

Look through your phone's app list for anything you do not remember installing. On Android, go to Settings > Apps (or process Manager) and scroll through everything. On iPhone, go to Settings > General > iPhone Storage and look at the full list. Pay special attention to apps with generic names like "System Update," "Device Manager," or "Settings" — these are common disguises for spyware.

Check what permissions each app has. On Android, go to Settings > Apps > Permissions and look for apps with access to your camera, microphone, location, contacts, or messages. On iPhone, go to Settings > Privacy and check each category (Camera, Microphone, Location Services, Contacts, Messages). If an app does not need that permission to work, uninstall it. For example, a flashlight app should never need access to your contacts.

Look specifically for apps with "Device Administrator" access on Android (Settings > Security > Device Administrators). This permission lets an app lock your phone, change your password, or wipe it remotely. Only your phone's manufacturer and your mobile carrier should have this. If anything else is listed, tap it and select "Deactivate."

Review your cloud account and signed-in devices

Someone with your password can sign into your Google Account or iCloud from another device and see your photos, messages, location, and more. Check what is signed in right now. On an iPhone, go to Settings > [Your Name] > Devices and look at the list. On Android, go to Settings > Google > Manage Your Google Account > Security > Your Devices and review what is there.

If you see a device you do not recognize, tap it and select "Remove" or "Sign Out." This does not erase the device — it just disconnects your account from it. If you see a location that does not match where you live or work, that is a red flag.

While you are in your account security settings, check "Recent Security Events" or "Security Checkup" to see if anyone has tried to log in from an unusual location. Most cloud providers show you the device type, location, and time of each login attempt.

Turn off location sharing and remote management

Location sharing is convenient but it is also a window into your movements. On iPhone, go to Settings > Privacy > Location Services and turn it off entirely, or go through each app and turn it off for apps that do not need it. On Android, go to Settings > Location and toggle it off, or manage it per-app in Settings > Apps > Permissions > Location.

Check your location sharing settings in Google Maps, Apple Maps, and Find My Friends (iPhone) or Family Link (Android). These let you share your real-time location with specific people. If you see someone listed who should not be there, remove them.

On iPhone, go to Settings > General > AirDrop and set it to "Contacts Only" or "Off." AirDrop lets nearby devices send files to your phone without your permission if it is set to "Everyone." On Android, check Bluetooth and NFC settings — turn off Bluetooth when you are not using it, and disable NFC if your phone has it.

Update your phone's operating system

Software updates patch security holes that spyware and hackers use to get in. On iPhone, go to Settings > General > Software Update and install any available update. On Android, go to Settings > System > System Update (the path varies by manufacturer). Restart your phone after updating.

Also update individual apps through your phone's app store. Open the Google Play Store or Apple App Store, go to your account or profile section, and look for "Manage Apps and Device" or "Updates Available." Install all pending updates.

Turn on automatic updates so you do not have to remember. On iPhone, go to Settings > General > Software Update > Automatic Updates and toggle on "read iOS Updates" and "Install iOS Updates." On Android, go to Settings > System > System Update > Advanced and toggle on "Automatic System Updates."

Factory reset as a last resort

If you cannot identify what is giving someone access, or if you suspect spyware that you cannot find and remove, a factory reset wipes your phone clean and reinstalls the operating system from scratch. This removes almost all spyware, but it also erases everything on your phone unless you have backed it up.

Before you reset, back up your photos, contacts, and important files. On iPhone, go to Settings > [Your Name] > iCloud and turn on iCloud Backup, then go to Settings > General > iPhone Storage and tap "Review Large Files" to see what is taking up space. On Android, go to Settings > Google > Manage Your Google Account > Backup and make sure "Backup by Google One" is on.

To factory reset, on iPhone go to Settings > General > Transfer or Reset > Erase All Content and Settings. On Android, go to Settings > System > Reset Options > Erase All Data (Factory Reset). Your phone will restart and ask you to set it up again. Sign back in with your new passwords, not your old ones.

Frequently Asked Questions

How do I know if someone is accessing my phone remotely right now?

There is no foolproof way to tell without technical tools, but watch for signs: your phone drains battery faster than usual, it gets hot without heavy use, you see unfamiliar apps or accounts, or your data usage spikes. If your phone is slow or crashes often, that can also indicate spyware, though it usually just means you need to clear storage or restart. The most reliable check is reviewing your installed apps and cloud device list as described above.

Can someone access my phone through my Wi-Fi network?

Yes, if your Wi-Fi password is weak or if someone is on your network, they can intercept unencrypted data. Change your Wi-Fi password to something strong (at least 16 characters), use WPA3 encryption if your router supports it, and turn off WPS (Wi-Fi Protected Setup) in your router settings. Avoid using public Wi-Fi for sensitive tasks like banking or email. If you must use it, use a VPN like Mullvad or ProtonVPN.

Is it safe to use a VPN to prevent remote access?

A VPN encrypts your internet traffic so your internet provider and people on your network cannot see what you are doing, but it does not stop someone who already has access to your phone itself. A VPN is useful for public Wi-Fi security, not for stopping spyware or someone with your password. Use it as one layer of protection, not the only one.

What should I do if I think my partner is monitoring my phone?

If you are in an unsafe relationship, contact the National Domestic Violence Hotline at 1-800-799-7233 or text START to 88788 before making changes. They can help you plan safely, because changing passwords or removing apps might alert your partner and escalate the situation. They can also connect you with local resources and shelters if you need them.

Do I need to buy security software to stop remote access?

No. The steps above — strong passwords, two-factor authentication, reviewing apps and permissions, and keeping your phone updated — are more effective than most paid security apps. Some paid apps add features like VPN or encrypted messaging, but they do not reliably detect spyware that is already installed. If you want additional protection, focus on the basics first.