Stay Safe. Stay Smart. Stay Safe. Stay Smart. Stay Safe. Stay Smart.

Installation & Initial Setup

Proper configuration is critical for Kavach to function. Follow these steps precisely to arm your device. This process involves granting high-level permissions that enable the app's core security functions.

Step 1: Installation

Kavach is too powerful for the Google Play Store. You must install it manually.

• Download the latest app-release.apk file from the project's official GitHub repository.
• Open the downloaded APK file on your Android device.
• You will likely need to grant your browser or file manager permission to "Install unknown apps". This is a standard security measure.
• Follow the on-screen prompts to complete the installation.

Step 2: Granting Core Service Permissions

Upon opening Kavach for the first time, you will be greeted by the Core Services screen (PermissionsFragment). This screen is your checklist for activating the app's foundational protections. You must enable all services for the app to function correctly. Each button will take you to the relevant system settings page.

The Core Services screen is the first step to securing your device.

• Runtime Permissions: This is the first and most basic step. It grants access to the camera, microphone, location, SMS, notifications, and more. These are essential for evidence collection and sending alerts.
• Device Admin: This is the most critical permission. It gives Kavach the power to remotely lock the device, wipe all data, and prevent unauthorized uninstallation. Without this, the app's anti-theft capabilities are severely limited. When you attempt to disable this service later, the AdminReceiver will intercept the action and lock the device unless Maintenance Mode is active.
• Accessibility Service: This service (PowerButtonService) monitors the system for when the power menu is opened. This is required for the Fake Shutdown feature, allowing the app to display a fake screen while remaining operational.
• Draw Over Other Apps: This permission allows Kavach to display its secure LockScreenActivity and FakeShutdownActivity on top of any other application, including the system UI. This ensures its security screens cannot be bypassed.
• Usage Access (Optional): This grants the advanced ThreatDetectionEngine the ability to monitor app usage patterns for anomalies, enhancing its ability to detect sophisticated threats. While optional, it is highly recommended for maximum security.

The Dashboard: Your Security Command Center

The Dashboard is the main screen of the application (DashboardFragment). It provides an at-a-glance overview of your device's security posture, potential threats, and configuration status.

The Dashboard shows your security level, active threats, and configuration checklist.

Security Level Meter

At the top of the screen, a 5-stage progress bar and status title indicate your current security level. This score is calculated by the SecurityScoreCalculator based on which critical features and permissions you have enabled. The levels are:

• Level 0 (Compromised): Device Admin is not active. The app is effectively useless.
• Level 1-2 (Poor/Fair): Basic permissions are granted, but key features are disabled.
• Level 3-4 (Good/Excellent): Most protective features are active.
• Level 5 (Maximum): All standard security features are enabled and configured.
• Level 6 (King Mode): Root access is detected. You have unlocked ultimate control.

Threat Assessment

This card, powered by the ThreatDetectionEngine and AISecurityOrchestrator, dynamically analyzes your device for suspicious activity. It flags potential threats such as rapid app installations, unexpected VPN usage, or anomalous data consumption, assigning a threat level from Minimal to Critical.

Security Checklist

This is a detailed list of the individual components contributing to your security score. Each item shows its status (Active/Inactive) and provides a brief description of its purpose. Use this checklist to identify and enable any remaining security features.

Core Features Arsenal

These are the primary tools at your disposal, configurable via the Authentication, Remote Control, and Features tabs in the app. They form a layered defense against theft and unauthorized access.

The Features screen allows you to enable and disable various security triggers.

Remote Data Destruction

Issue a remote SMS command to initiate a full data wipe, rendering the device's contents irrecoverable to adversaries.

Fake Shutdown

Intercepts the power menu, presenting a counterfeit shutdown animation while the device remains fully operational, tracking, and recording.

Duress & Wipe PINs

Unlock your device under coercion with a Duress PIN to silently trigger a high alert, or a Wipe PIN for a scorched-earth response.

Total Evidence Collection

On alert, captures front/back photos, video, ambient audio, and GPS coordinates, then emails the package to your emergency contact.

SIM Change Alert

Detects if the SIM card has been removed or replaced and immediately triggers a medium-level security alert.

Stealth Operations

Hide the app icon from the launcher. Access is granted only by dialing a secret code, leaving no trace of its existence for unauthorized users.

Multi-Level Authentication

Configure three distinct PINs in the Authentication tab (PinsFragment) for different scenarios. The LockScreenActivity will react based on the PIN entered.

• Normal PIN: Safely unlocks the device.
• Duress PIN: Unlocks the device but silently triggers a HIGH severity alert.
• Wipe PIN: Unlocks the device but triggers a CRITICAL severity alert and initiates a full device wipe.

Intruder Selfie

When enabled, the app logs failed unlock attempts. After 3 or more failures, it triggers a MEDIUM severity alert, activating the PanicActionService to discreetly take a photo using the front camera.

Fake Shutdown

Requires the Accessibility Service. When a user tries to open the power menu, Kavach intercepts it and displays a convincing fake shutdown screen (FakeShutdownActivity). The device appears off but remains fully active, sending alerts and evidence.

SIM Change Alert

The SimChangeReceiver constantly monitors the device's SIM card serial number. If it is changed or removed, a MEDIUM alert is triggered, notifying you of potential theft.

Shake to Panic

When enabled, the MonitoringService uses the accelerometer to detect vigorous shaking. This triggers a HIGH severity panic alert, useful for situations where you cannot interact with the screen.

Stealth Mode

Hides the application's icon from the launcher by disabling its activity-alias. The app can then only be opened by dialing a secret code (e.g., *#*#1234#*#*) which is detected by the SecretCodeReceiver.

Watchdog Mode

A periodic "proof-of-life" service. The WatchdogWorker runs at a configured interval (e.g., every 30 minutes) and sends a status update with battery and location information to your emergency contact. This confirms the device is still operational.

Data Destruction Tripwire

An extreme security measure. If the device fails to connect to the internet for a pre-defined duration (e.g., 24 hours), the TripwireWorker assumes the device is captured and offline. It will trigger a CRITICAL alert and initiate a full device wipe.

Safe Zone Geofence

Set a geographical "safe zone" (e.g., your home). If the device leaves this area, the GeofenceBroadcastReceiver will trigger a LOW severity alert, notifying you that the device is on the move.