Android 17 is adding a native App lock to Pixel phones, so a banking app or a messaging thread can be sealed behind your fingerprint even when the phone itself is unlocked. It is a feature Android has needed for years. It also arrives with a caveat that Google states plainly in its own description of the feature: locking an app keeps other people out, but the AI agents and services you have already granted access to can still read that app’s data.
How Android 17 App lock works
The feature turned up in Android 17 QPR2 Beta 3, spotted by 9to5Google. Long-press an app icon to bring up the Actions menu and “App lock” now sits at the bottom of the list alongside App info, Pause app, Widgets, Remove and Bubble. Once it is on, opening the app triggers the standard system authentication sheet, requiring a fingerprint or your PIN before anything on screen appears.
Locking an app changes two other things, per Google’s own explanation of the feature: “Notification content will be hidden” and “Widgets and shortcuts will be removed”. That second one is worth knowing before you enable it on something you rely on from the home screen, because a locked app loses its widget whether or not you wanted it to.
Everything you have locked is listed in one place, at Settings > Security & privacy > App lock, where apps can be added or switched off individually.
The AI agent exception is the part that matters
Google’s own description of App lock includes a third line: AI agents and services you have allowed to access an app will still be able to reach its data even after the app is locked. Read that back slowly. If you lock WhatsApp or a banking app because you do not want its contents casually readable, the lock stops a person holding your unlocked phone. It does not stop software you granted access to at some earlier point, possibly during a setup flow you clicked through months ago.
That is a defensible engineering decision, since an assistant that could no longer summarise your messages would be a broken assistant. But it means App lock is a physical-access protection, not a data-access one, and Google’s marketing for it is unlikely to draw that distinction as clearly as that description does. Before you treat a locked app as private, it is worth going through which agents and services already hold permission to it, because the lock will not revoke any of them.
When it arrives
App lock is in the QPR2 beta now, which means Pixel owners enrolled in the Android Beta Programme can try it today. 9to5Google says Android 17 QPR2 will be available this December for everyone else, arriving on the same build that brings the call-forwarding scam protections we covered from Beta 3.
Source: 9to5Google
