Android 17 Beta 2 tests a restriction that blocks non-accessibility apps from using the system accessibility services API when Advanced Protection Mode is enabled and automatically revokes existing permissions from those apps. A developer documentation page from Google states the restriction is part of Advanced Protection Mode in Android 17.
KEY FACTS
- Change Android 17 Beta 2 blocks non-accessibility apps from the accessibility services API while Advanced Protection Mode is active
- Exception Apps marked with isAccessibilityTool=”true” are allowed to use the API
- Effect Permissions already granted to non-accessibility apps are revoked automatically when the mode is active
- Scope Screen readers and switch, voice, and Braille input tools are classed as accessibility tools; many other app types are excluded
The restriction appears in Android 17 Beta 2. Advanced Protection Mode was introduced in Android 16 and places devices into a heightened security state that limits functions such as app installs from unknown sources and USB data signaling.
Under the change, non-accessibility apps cannot hold or be granted the accessibility services permission while Advanced Protection Mode is active. The documentation identifies verified accessibility tools by the isAccessibilityTool=”true” flag as exempt.
The accessibility services API has legitimate uses for users with disabilities but has been extensively abused in recent years to steal sensitive data from compromised devices. The change aims to reduce that attack surface by limiting which apps can access the API during the heightened security state.
The documentation also notes an AdvancedProtectionManager API that lets apps detect the mode and adapt by restricting high risk features. Users cannot grant the accessibility permission while Advanced Protection Mode is enabled and must turn the setting off to restore the ability to grant it.
WHY IT MATTERS
Restricting the accessibility API in Advanced Protection Mode reduces a known vector for data theft at the cost of limiting some app functionality. The change is a trade off between tighter security and reduced app capabilities for users who opt into the mode.