This Android lock screen bug lets anyone text using Gemini without knowing your PIN

Google confirms a fix is coming for this risky Gemini lock screen bug

By Manisha Priyadarshini Published July 19, 2026

google-gemini — Google

Your Android lock screen is supposed to keep your messages safe, even if someone gets hold of your phone. But a newly discovered Gemini bug could do the opposite. Since May, The Register has received multiple reports of people bypassing device authentication on Android 16 devices that allow Gemini access straight from the lock screen.

The flaw lets anyone use Gemini to send SMS and even WhatsApp messages without ever entering your PIN. It only works under specific conditions, but it is serious enough that Google has confirmed a fix is already rolling out.

How does the Gemini bug bypass your Android PIN?

The exploit comes down to a very specific move. Normally, if you have revoked Gemini’s access to Messages, asking it to send a text from the lock screen prompts you to open the app, which then correctly asks for your PIN. But pressing Continue at the exact same moment as Gemini’s Add Attachment button breaks that safeguard entirely, letting the SMS go through with zero authentication.

Recommended Videos

From there, things get worse. Typing something like @WhatsApp into Gemini’s text field can silently reconnect apps you had previously disconnected, again without ever requiring your PIN. As shown in the video below, checking your settings afterward would show WhatsApp linked to Gemini as if you had approved it yourself.

How risky is this, and what should you do about it?

The exploit requires someone to physically possess your phone, making it less dangerous than a remote attack. Even so, researchers warned it could be abused in phone theft cases, allowing thieves to send convincing messages from your number before you regain control of your device.

Interestingly, this bug is not limited to Pixel devices either, though some users reported being unable to reproduce it on Samsung phones. Google has yet to clarify exactly which manufacturers or models remain vulnerable.

Google also said it was already aware of the issue and scheduled a full fix for deployment this week. Until that update reaches your phone, disabling Gemini’s lock screen access entirely is your safest bet until the patch arrives.

Manisha Priyadarshini

News Writer

Manisha Priyadarshini is a tech and entertainment writer with over nine years of editorial experience.

Topics

Phones

The Pixel 11 gives me three reasons to ditch my iPhone 17, and I’m afraid they’ll work

Google’s latest entry-level flagship makes my iPhone 17 look a lot less compelling.

Electronics, Mobile Phone, Phone

As someone who reviews smartphones for a living, upgrading every year isn't optional. It's part of the job, and as an iPhone user, it's an easy call. This year, I expected to move from my baseline iPhone 17 to Apple's next baseline model, the iPhone 18. Except Apple might not even launch it this September.

Pegatron, one of Apple's suppliers, indicated on an August 12 earnings call that the standard iPhone 18 isn't coming next month (via Deccan Chronicle). Only the Pro, Pro Max, and the rumored foldable "Ultra" are expected, with the base model pushed to early 2027. That alone would derail my plans. But it's just one domino in a longer line for Apple: the Pixel 11.

Phones

Cracking your Galaxy Z Fold 8 Ultra screen could cost $639, so handle it carefully

Samsung's new numbers put an exact, and fairly painful, figure on just how much pricier.

Computer, Electronics, Tablet Computer

Cracking your foldable's screen has always been an expensive mistake, but Samsung just put an actual price on it this year, and believe me, it’s more expensive than I initially thought it would be.

The company confirmed official repair pricing for the entire Galaxy Z Fold 8 lineup, and fixing the inner display alone can cost more than some budget phones do new. Given that more people are buying into the category, making these revised repair costs all the more important to know before you take the plunge.

Phones

I’ve waited far too long for Pixels to get this stupidly simple gesture

Just ship the double-tap-to-lock gesture already Google.

Electronics, Mobile Phone, Phone

Every time I switch from any Android phone to a Pixel, there's one small gesture missing that always annoys me. From a modern Galaxy phone or even a device from Xiaomi, I can double-tap an empty part of the home screen and immediately turn the display off. Samsung has offered a double-tap to turn off the screen since Android 11. On a Pixel, I still have to reach for the power button.

To be fair, Google isn't the only offender, and Motorola's stock Android phones, like the Razr Fold, also skip such a basic feature. But this might be changing soon. Android Authority has discovered updated code strings inside Android 17 QPR2 Beta 3 pointing to Google’s long-in-development double-tap-to-sleep feature. Better still, Google appears to have expanded it beyond the lock screen and onto the home screen, which is exactly where I want it.