Add & remove certificates
If an app or network that you want to use needs a certificate that you don't have, you can install that certificate manually.
Digital certificates identify computers, phones, apps, and other devices for security. Just like you'd use your driver’s license to show that you can legally drive, a digital certificate identifies your device and confirms that it should be able to access something.
Important: Some of these steps only work on Android 14 and up. Learn how to update your Android version.
Install a certificate
- Open your device's Settings app.
- Tap Security & privacy 👁 And then
More security settings 👁 and then
Encryption & credentials. - Tap Install a certificate 👁 And then
Wi-Fi certificate. - Tap Menu 👁 Image
. - Tap where you saved the certificate.
- Tap the file.
- If needed, enter the key store password. Tap OK.
- Enter a name for the certificate.
- Tap OK.
Tip: If you haven't already set a PIN, pattern, or password for your device, you'll be asked to set one up.
Remove custom certificates
Important: Removing certificates you've installed doesn't remove the permanent system certificates that your device needs to work. But if you remove a certificate that a certain Wi-Fi connection requires, your device may not connect to that Wi-Fi network anymore.
- Open your device's Settings app.
- Tap Security & privacy 👁 And then
More security settings 👁 and then
Encryption & credentials. -
Under "Credential storage":
- To clear all certificates: Tap Clear credentials 👁 And then
OK. - To clear specific certificates: Tap User credentials 👁 And then
Choose the credentials you want to remove.
- To clear all certificates: Tap Clear credentials 👁 And then
Use WPA-Enterprise Wi-Fi
Important: If you’re missing any info, you may not be able to connect to your network.
You can use a WPA/WPA2/WPA3-Enterprise configuration for more security. To connect to WPA/WPA2/WPA3-Enterprise network:
- Open your device's Settings app.
- Tap Network & internet 👁 And then
Internet 👁 And then
Add network 👁 Add
. - Enter the network info provided by your network administrator.
“Do not validate” changes & fixes
Important: The “Do not validate” setting option used in EAP-PEAP, EAP-TLS, and EAP-TTLS configurations has been removed for security reasons. It was removed in the Android 11 feature update release.
Saved Enterprise configurations that are set up to turn off server certificate validation aren’t affected. But you can’t create new or edit saved settings.
To make your network more secure, fix less secure configurations.