Android Lock Screen Quick Settings Restrictions Narrowed to 4 Toggles

New code inside the Android Canary 2608 build suggests Google is considering a narrower set of Android lock screen Quick Settings restrictions than what its earlier work pointed toward. Rather than locking down nearly every tile, the strings now single out four: Wi-Fi, Bluetooth, Mobile Data, and Airplane Mode, according to an Android Authority code teardown. Flashlight and auto-rotate would stay usable without unlocking the phone, based on the same code.

That's a shift from what turned up six weeks ago. Strings in Android 17 QPR1 Beta 5 pointed to a stricter setup requiring an unlock for every Quick Settings tile except Flashlight, according to Android Authority.

Neither version works yet. Both are inferred from text strings inside unreleased builds, and Android Authority's teardown states plainly that the August code "is not live yet." Still, the rewrite from "any Quick Settings tile except the Flashlight" to a specific four-item list is the clearest sign so far of how Google's thinking on this feature has moved.

Which Android Quick Settings tiles could require an unlock?

The Canary 2608 strings spell out the new scope directly. The relevant line now reads: "you must unlock your device to use Wi-Fi, Bluetooth, Mobile Data, and Airplane Mode," according to Android Authority's teardown. That replaces an earlier version covering "any Quick Settings tile except the Flashlight."

Based on that code, someone holding a locked phone would still be able to switch on the flashlight or trigger auto-rotate without a passcode. What they couldn't do is touch the phone's connectivity: no toggling Wi-Fi, no killing mobile data, no dropping into Airplane Mode, without unlocking first.

What changed since the Beta 5 string

Line up the two strings and the change is easy to see. In late June, the Beta 5 setting was labeled "Require unlock for Quick Settings," with summary text warning that, to prevent unauthorized changes, users would need to unlock the device to use any tile besides Flashlight, according to Android Authority.

By this week, Canary 2608 had replaced that blanket language with the four-item connectivity list, according to the same outlet's follow-up teardown. Android Authority frames the newer code as splitting the difference, restricting some locked tiles instead of nearly all of them, while noting that neither behavior actually functions in either build.

That distinction matters. These are strings a developer wrote into a resource file, not a setting anyone has flipped in a working menu. The supplied reports don't identify which release, if any, would carry this feature into a public beta, and the four-toggle list could still change again before then.

Why connectivity controls appear to be the focus

The rationale traces back to a gap in Android's lock screen documented a few years ago. A 2023 report from Java Code Geeks found that Android's pull-down menu worked even on a locked phone, letting anyone holding the device disable mobile data and Wi-Fi, switch on a hotspot, or flip into Airplane Mode without entering a passcode. That report said the issue remained unfixed in stock Android as of when it was written, though it noted some manufacturers had patched the behavior inconsistently in their own custom software.

That older gap helps explain why connectivity controls would be the focus of a lock screen restriction, though Google hasn't publicly stated its rationale. Android Authority reads the change as seemingly targeting tiles a thief could use to disable tracking, while leaving lower-risk utilities like flashlight and auto-rotate available on a locked screen, according to its analysis. Someone holding a locked phone could still cut off its connection: disabling Wi-Fi or mobile data, or switching to Airplane Mode, could sever the signals that tracking and remote-wipe tools depend on.

Google already has a working model for what "nothing accessible when locked" looks like elsewhere in its own products. Family Link's locked-device mode for child accounts disables the pull-down menu entirely, per the Java Code Geeks report, so the idea that a locked phone should give up nothing isn't new inside the company. It just hasn't been the default for standard accounts.

The phrase "to prevent unauthorized changes" survived the rewrite from June to August, appearing in both the Beta 5 string and the Canary 2608 string. That consistency is one reason to read the narrower list as still aimed at security rather than a change in purpose, even as the scope shrank from nearly every tile down to four.

A broader Quick Settings redesign in Canary 2608

The lock screen strings aren't the only new thing in this build. Canary 2608, released this week, also adds a Quick Settings layout editor for Pixel phones, letting users reorder the Brightness bar, Tiles, and Media player across six possible combinations, according to 9to5Google. It arrives with the August 2026 security patch, spanning devices from the Pixel 6 through the Pixel 10, per the same report.

One option in that editor moves the media player above the first row of tiles, a detail Android Authority spotted after Google's own rollout post left it out. By default, Android shows tiles like Wi-Fi, Bluetooth, Modes, and Wallet at the top of the shade, with playback controls underneath. Flipping the order makes media controls reachable after one swipe instead of a scroll.

It's worth keeping the two changes separate. One is a code string describing a restriction nobody can turn on yet. The other is a visible, working setting already available to test in Canary 2608. Landing in the same build doesn't make them related beyond timing, but it does show how much of Quick Settings Google is reworking at once.

When could these Android lock screen Quick Settings restrictions arrive?

There's no working version of this feature to test. The restriction doesn't function in Canary 2608, and the four-toggle list exists only as text strings that Android Authority inferred behavior from, not a setting anyone can switch on.

Whether it ships as an opt-in choice or a mandatory default isn't settled either. The June string named the setting "Require unlock for Quick Settings," phrasing that implies a toggle users would enable rather than something forced on everyone, per Android Authority's earlier report. That same report guessed the control would eventually live somewhere among lock screen settings, but called the placement uncertain even then.

Canary builds are experimental, and strings inside them get rewritten or dropped before reaching a public beta. Given that the four-toggle list already replaced a far broader one within six weeks, there's little reason to treat today's version as final. Whether it survives intact, whether Google makes it opt-in, and which Android release eventually activates it remain open questions until a testable build actually shows up.