Defendyour information

Mobile Security

PDA Defense was built on a simple idea: assume the handheld will be lost, and make sure nobody else can read it. That idea matters more now than it did in 2001, because the phone that replaced the PDA holds money.

A modern smartphone carries a banking app, a payment wallet and, for a large and growing number of people, accounts at online casinos, poker rooms and sportsbooks, each with a balance, a saved card and a withdrawal method. Those accounts are targeted in all the ways a PDA was, through a lost or stolen device, plus several new ones: SIM swaps, phishing pages, fake Wi-Fi in hotels and resorts, and malicious apps that imitate the real thing.

These notes apply the PDA Defense playbook to today's phones. Lock the device and the apps on it. Use two-factor authentication on every account that holds money. Keep traffic off networks you do not control. Know how to wipe the phone before you need to.

The PDA Defense principles, then and now

PDA Defense, 2003Smartphone equivalent
Power-on password, soft-reset activationDevice passcode with biometrics, short auto-lock
Application launch protectionApp-level PIN or Face ID on casino, betting and banking apps
Blowfish / AES encryption of databases and cardsBuilt-in full-device encryption, active only with a passcode set
Data transfer disabling while lockedHidden notification previews, restricted backups and clipboard sync
Bluetooth and Wi-Fi lockdown (Enterprise 3.1d)Bluetooth off when unused, no auto-join for open networks
Bitwiping "bomb" and remote wipe policy fileFind My / Find My Device remote lock and erase
Temporary unlock password from the administratorAccount recovery through an authenticator app or verified email