← Back to Google Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide

V-260171

CAT II (Medium)

Android 14 devices must be configured to disable the use of third-party keyboards (work profile only).

Rule ID

SV-260171r959010_rule

STIG

Google Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366

Discussion

Many third-party keyboard applications are known to contain malware. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

Review the managed Google Android 14 configuration settings to confirm that no third-party keyboards are enabled (work profile only). 
 
This procedure is performed on the EMM console.
 
On the EMM console:

1. Open "Input methods".
2. Tap "Set input methods".
3. Verify only the approved keyboards are selected.

If unapproved third-party keyboards are allowed in the work profile, this is a finding.

Fix Text

Configure the Google Android 14 device to disallow the use of third-party keyboards (work profile only). 
 
On the EMM console:

1. Open "Input methods".
2. Tap "Set input methods".
3. Select only the approved keyboards.

Additionally, admins can configure application allowlists for Google Play so no third-party keyboards are available for user installation.