Next-Generation Mobile Security for AI Personalisation

Samsung is introducing ,[1] a new architecture designed to safeguard the next generation of personalised, AI-powered features, as its latest innovation in mobile security. KEEP creates encrypted, app-specific storage environments within the device’s secure storage area, ensuring that each app can access only its own sensitive information and nothing more.

Supporting Galaxy’s Personal Data Engine (PDE),[2] KEEP helps secure a user’s personal insights – such as routines and preferences – that enable features like Now Brief and Smart Gallery search. These insights stay entirely on-device, protected by KEEP and furthersecured by Knox Vault. The result is a seamless foundation for Galaxy AI that delivers personalised intelligence while keeping data under the user’s control.

KEEP’s system-level structure allows it to scale across Galaxy AI[3] innovations. In addition to PDE, it now covers Now Brief, Smart Suggestions and other on-device features that rely on user-specific inputs – enabling more advanced AI experiences. With KEEP, Samsung is changing how mobile devices help safeguard data in the background to elevate privacy from a setting to an embedded design principle.

Smarter, More Connected Threat Response with Knox Matrix

As AI becomes more integrated across the ecosystem, Samsung is advancing protections that offer greater transparency and control for users, with Knox Matrix leading the way. Through One UI 8, Samsung is evolving Knox Matrix to deliver more proactive and user-friendly protection for connected Galaxy devices.

Users are notified across their connected Galaxy devices and guided to the ‘Security status of your devices’ page, where they can review the issue and take action. Even devices without the latest security status updates trigger a yellow-level warning.

Together, these updates make Samsung Galaxy’s ecosystem-level protection more dynamic, intuitive and visible, empowering users to maintain trust across all their devices with more confidence and clarity.

Secure Wi-Fi Strengthened with Encryption

In continuation of its commitment to security, Samsung is strengthening Secure Wi-Fi,[4] extending the trusted approach first introduced on the Galaxy S25 series through Post-Quantum Enhanced Data Protection (EDP). Secure Wi-Fi is now being upgraded with a new framework[5] designed to strengthen network protection.

In addition to this future-ready foundation, Secure Wi-Fi offers a suite of advanced privacy features:

• Auto Protect: Activates in public places like cafés, airports or hotels, securing Wi-Fi connections without requiring user action.
• Enhanced Privacy Protection (EPP): Encrypts internet traffic and routes it through multiple layers, combining packet encryption and relay to anonymise device information and help prevent tracking.
• Protection Activity: Provides visibility into protection history by showing which apps and networks were secured and how much data was encrypted over time.

A Trusted Platform with Built-In Safeguards

In addition to its latest innovations, Samsung continues to strengthen the core protections that underpin the Galaxy experience. These features reflect a multi-layered security approach that helps protect across hardware and software, while giving users greater visibility and control:

• Knox Vault secures sensitive credentials such as passwords, PINs and biometrics in a physically isolated environment.
• Auto Blocker helps provide defense, blocking unauthorised app installs, restricting command-based attacks and mitigating risks.
• Advanced Intelligence Settings gives users the option to turn off online data processing for AI features, so personal information can stay on-device.
• Enhanced Theft Protection helps protect personal data using safeguards like Identity Check and Security Delay to prevent unauthorised access.

This latest set of updates reinforces Samsung’s long-standing commitment to mobile security that evolves with innovation. It strengthens on-device privacy for personalised AI with  , expands transparency and user control through Knox Matrix, . As new security challenges emerge, Samsung remains focused on delivering safeguards that are built in, always on and ready for what’s next.

^[1] Available on Galaxy smartphones and tablets with One UI 8 or later.

^[2] The Personal Data Engine functions when the Personal Data Intelligence menu is on. Analysed data will be deleted once the Personal Data Intelligence menu is turned off.

[3] Now Brief feature requires Samsung Account login. Service availability may vary by country, language, device model and apps. Some features may require a network connection. Modes and Routines need to be enabled to use Personal Data Engine for context-based Routines suggestions. User needs to consent to access permissions such as photos, videos, audio files, and calendar events. May not display moments depending upon exposure policy. Energy Score requires health data tracked from Samsung Galaxy Watch or Galaxy Ring and is intended for general wellness and fitness purposes only. The description of photos provided by moments may not align with the user’s intent. Events schedule notification is supported with calendar apps that utilize Android calendar database and available if Samsung Calendar is installed. Notifications for coupons only available for coupons added to Samsung Wallet with expiration date.

[4] Secure Wi-Fi offers free protection of up to 1024MB per month for Android OS 13 or later, and 250MB per month for Android OS 12 or earlier versions. Availability details may vary by market or network provider and connectivity is subject to applicable network environments.

[5] This upgrade applies a post-quantum cryptographic algorithm certified under NIST FIPS 203 (ML-KEM). Availability may vary by market, model, and OS version.

This level of personalisation can be incredibly helpful, but the more your phone knows, the more there is to protect. So, what’s keeping all that personal data secure?

Samsung believes there is no privacy without strong security. That’s why every Galaxy device is protected from the chip up by a multi-layered approach, which includes on-device personalisation, user-controlled cloud processing, and ecosystem-wide protection through Samsung Knox Matrix.

At the core of this system is Samsung Knox Vault[2], Samsung’s hardware-based solution for your most sensitive information.

Secured at the Hardware Level

Most devices rely on software alone to guard sensitive data, but Galaxy devices go further.

Knox Vault is a hardware-level security solution that creates a physical barrier between your most private information and everything else. It works like a locked room inside your phone, with its own processor and memory. It pairs a secure processor with dedicated memory, isolating your passwords, PINs, biometrics, and cryptographic keys. These are the kinds of details you don’t want anyone else to access, and Knox Vault is built to make sure they stay private. You don’t need to activate or manage it, it’s always on, working silently in the background, helping keep your data safe while you get on with your day.

This is particularly crucial in the age of AI as user concerns are expanding from traditional cybersecurity threats, like viruses and malware, to worries over leaking personal data, such as conversations with your AI assistant. And as AI becomes part of more everyday tasks, the types of data that need protection are also expanding.

For example, location service metadata from your personal photos, not only details the resolution and file format, but could easily give away where you live and the exact location where the image was taken. In the era of AI, personal information like your address, face clustering ID, person ID, pet type, scene type and more need to encrypted and stored in a safe location. These things aren’t just files — they are deeply connected to your daily life.

Knox Vault helps mitigate these growing concerns by safely storing personal information in a secure, hardware-isolated environment designed to block both physical tampering and remote attacks ensuring your data can’t be accessed without approval.

Personalised AI, Protected at the Core

Knox Vault not only provides protection for today’s threats, it also ensures your privacy as mobile experiences continue to evolve.

As Galaxy AI becomes more useful, it also becomes more personal — learning how you use your device and adapting to your needs. And because this relies on deeply personal data, Knox Vault plays a crucial role in keeping that information private.

Features like Now Brief[3] provide useful summaries and suggestions based on your daily activity, while Modes and Routines[4] creates auto-generated routines by adjusting settings in response to your habits. These tools and the highly tailored AI experiences they enable are guided by a map of personalised data – data that is encrypted, with Knox Vault securing the keys.

Galaxy AI¹ also ensures privacy by processing tasks directly on-device where possible[5], keeping data in your hands and off online servers. Audio Eraser,[6] for example, can remove the background noise from videos or voice recordings without the need for any cloud-based processing — helping your personal comversations stay private. Call Transcript[7] and summary operates in the same way, keeping your calls organised while ensuring personal conversations stay private by remaining on-device.

Knox Vault helps ensure your data is protected, confidential and secure. Building on its role in Galaxy AI¹ as the trusted foundation for security and privacy, Knox Vault will expand across Samsung’s growing AI ecosystem as AI becomes more deeply integrated into the user experience.

Knox Vault is more than a security feature, it’s Samsung’s promise that no matter how advanced your devices become, or how much AI evolves, keeping privacy secured is our goal.

[1] Fees may apply to certain AI Features at the end of 2025. Certain Galaxy AI features requires Samsung and Google Account. Internet connection may be required to use some features.

[2] Samsung Knox Vault is included on Galaxy S series, Galaxy A series, Galaxy Tab S series and more. Knox Vault availability may vary by model.

[3]  Now Brief requires Samsung Account login, app compatibility and user’s consent to access certain information. Service availability may vary.

[4] Modes and Routines requires Samsung Account login. Customised content and recommendations requires Permissions to access data including location, app usage and how you use your device.

[5] Samsung Account login required. Processing data only on your device allows advanced intelligence features to operate locally, rather than online. Enabling this option may limit the functionality of certain AI features that rely on online data processing for advanced capabilities.

[6] Results may vary per video depending on sounds present in the video. Samsung Account login required. Certain types of sound can be detected such as voices, music, wind, nature, crowd and noise. The actual sound detection may vary depending on audio source, and the condition of the video. Accuracy of results is not guaranteed.

[7] Call Transcript feature requires a network connection to receive calls. Samsung Account login required. Summary feature for Call Transcript is capable of automatically transcribing recorded calls when a certain number of characters is met and is under the character limit. Call recording may not be supported in some countries. Currently available on pre-installed Samsung phones and Voice Record app. Service availability may vary by language or region. Certain languages may require language pack download. Accuracy of results is not guaranteed.