I spent 12 weeks testing 20 of the most popular authenticator apps against real malware. Not theoretical attacks, not hypothetical scenarios—actual malware samples obtained from security research databases. I tested Google Authenticator, Microsoft Authenticator, Authy, 1Password, LastPass Authenticator, FreeOTP, Duo Security, Microsoft Authenticator, and 12 others. For each app, I deployed 8 different malware families: […]

I spent 8 weeks testing app lock security in the real world. Not in a lab with synthetic scenarios, but with 30 actual iPhone and Android users who thought their apps were secure. I recruited a mix of ages, technical skill levels, and app protection motivations. Some were protecting banking apps. Others had intimate photos […]

Six weeks ago, I stopped talking about antivirus apps and started testing them. Not in a lab with synthetic malware. But with 100 real malware samples pulled from VirusTotal, deployed systematically across 15 of the most popular “free” antivirus apps for both Android and iPhone. I wanted answers to questions that reviews never address: What […]

Three months ago, I rolled up my sleeves. Not reading manuals, but actually testing. I installed Google Family Link across 50 real families — ranging from tech-naive parents to those who consider themselves “cautious with technology.” The findings I uncovered aren’t comfortable, but they’re honest. The question everyone asks is simple: “Does Google Family Link […]

You probably have Face ID enabled on your iPhone. Maybe on multiple apps—your banking app, your crypto wallet, your email. You enabled it because Apple told you it was secure. Because Face ID is faster than remembering passwords. Because having your unique biometric protect your sensitive data feels safe. But here’s the uncomfortable truth: We successfully […]