Google released Android 17 QPR2 Beta 3 on August 14, 2026, bringing a long-awaited native App Lock feature to eligible Pixel devices. Available under builds CP41.260731.005.A2 and CP41.260731.005.B1 with the August 2026 security patch, the update also introduces critical anti-fraud protections against programmatic call forwarding and expanded Quick Settings interface customization.
Native App Lock Closes a Longstanding Gap for Pixel Devices
For years, users handing their Pixel phones to children, coworkers, or friends faced a frustrating limitation: stock Android lacked any built-in method to lock individual applications. While Apple introduced Screen Time app restrictions back in iOS 12 in 2018, and Samsung deployed its Secure Folder and Knox-backed app-locking ecosystem in 2016, Google relied entirely on third-party workarounds or limited features like Private Space. That changes with Android 17 QPR2 Beta 3.
According to reports from HNGN, enabling the feature is straightforward. Long-pressing any app icon now exposes an “App lock” option right alongside standard shortcuts like App info. Once activated, opening that specific application requires a fingerprint or PIN check. Crucially, the operating system goes beyond merely gating the launch screen. Notifications from locked apps remain entirely hidden on the lockscreen, and any widgets or home screen shortcuts tied to those applications are similarly concealed.
Centralized management is housed under Settings > Security & privacy > App lock, allowing users to audit every protected program in one place. However, there is a distinct architectural caveat: as noted by TechNerdiness, any AI agents or automated assistants that already held permissions to access an app’s data prior to locking will retain that access. App Lock is designed to stop a human hands-on attacker or a casual borrower, not to revoke pre-authorized background API tokens.
Combating Call Forwarding Fraud at the System Level
Beyond visual and privacy upgrades, Android 17 QPR2 Beta 3 targets a surging category of social engineering known as call-forwarding fraud. Attackers frequently use USSD codes beginning with sequences like 21 to secretly redirect incoming cellular traffic to an external number. This tactic allows threat actors to intercept vital one-time authentication codes sent via voice by banks, email providers, and recovery services during SIM-swap adjacent attacks.
Google’s mitigation strategy operates on two distinct levels, according to HNGN’s reporting. First, applications lacking elevated permissions are entirely blocked from executing background USSD call-forwarding commands. Second, if a user manually dials such a sequence through the system dialer, a new OS-level confirmation prompt interrupts the process, introducing crucial friction to break the psychological momentum of active scams.
Eligible Hardware and Release Timeline
The unusual Friday software drop on August 14, 2026, includes Google Play services version 26.26.34. System images and over-the-air packages span a wide roster of devices, ensuring broad compatibility across recent generations:
- Pixel 6a and Pixel 7 series (7, 7 Pro, 7a)
- Pixel 8 series (8, 8 Pro, 8a)
- Pixel 9 series (9, 9 Pro, 9 Pro XL, 9 Pro Fold, 9a)
- Pixel 10 series (10, 10 Pro, 10 Pro XL, 10 Pro Fold, 10a)
- Pixel Fold and Pixel Tablet
The newly announced Pixel 11 series is notably absent from the beta lineup because those devices remain in pre-order status. While Google has not confirmed a precise commercial rollout date for the stable version, historical patterns for quarterly platform releases point toward a December 2026 launch bundled alongside the standard winter Pixel Feature Drop.
