Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

For someone who may be individually targeted by mercenary spyware, an up-to-date iPhone with Lockdown Mode enabled has the clearest purpose-built defense. A supported Android 16 device with Advanced Protection is a serious alternative, and may be the better choice when its update support and hardware protections are stronger for your situation. Neither platform is immune, and no public evidence provides a current, apples-to-apples infection rate proving that one has fewer targeted-spyware infections.

The safer choice is the phone you can keep updated, configure in its high-risk mode, and use without routinely bypassing its restrictions. Your threat model, exact device, security-update policy, account protection and ability to obtain specialist help matter more than the logo on the back.

What “targeted spyware” means

Targeted mercenary spyware is commercial surveillance malware developed for a small number of selected victims rather than mass infection. The targets may include journalists, activists, elected officials, heads of state and government critics. The Pegasus Project, documented by Amnesty International in 2023, examined a leaked list containing 50,000 potential spyware targets from 2021.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some attacks are zero-click: a specially crafted message, call, notification or network interaction can exploit the phone without the victim tapping a link or opening an attachment. Other campaigns use one-click browser attacks, in which the victim must visit a malicious page. Apple says one-click browser attacks remain a critical entry path on iOS, Android and Windows. Avoiding suspicious links is useful, but it cannot by itself defeat a zero-click exploit.

#1 Best Overall
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
  • This phone is unlocked and compatible with any carrier of choice on GSM and CDMA networks (e.g. AT&T, T-Mobile, Sprint, Verizon, US Cellular, Cricket, Metro, Tracfone, Mint Mobile, etc.).
  • Please check with your carrier to verify compatibility.
  • The device does not come with headphones or a SIM card. It does include a generic (Mfi certified) charging cable.
  • Tested for battery health and guaranteed to have a minimum battery capacity of 80%.

Mercenary spyware campaigns are unusual but exceptionally capable. Apple’s 2025 security-bounty guidance says the company mainly observes in-the-wild iOS attacks as highly sophisticated exploit chains aimed at a very small number of individuals, with development costs reaching millions of dollars. Apple also says, “Most people are never targeted by attacks of this nature.” That does not make the risk irrelevant for a person whose work, position or reporting makes them a deliberate target.

Android and iPhone protection at a glance

Platform option Purpose-built protection What it changes Main trade-off
Current iPhone Lockdown Mode Restricts selected apps, websites, media handling, connectivity and other features to reduce sophisticated attack surface. The phone will not function normally while the mode is enabled.
Supported Android 16 device Advanced Protection Adds device-level controls around sideloading and accessibility permissions; Play Protect continues scanning apps from multiple sources. Protection depends on the exact device, Android version and hardware support.
Android 17 protected mode Additional Advanced Protection features described by Google’s 2026 update Optional intrusion logging, USB Protection, tighter accessibility-service restrictions and disabling WebGPU in protected mode. Availability varies by device.

This is a capability comparison, not an infection-rate ranking. Public primary sources do not establish that iPhone or Android currently has fewer targeted-spyware infections overall.

Why an iPhone with Lockdown Mode is the clearest default

Apple designed Lockdown Mode specifically for people who may be targeted by highly sophisticated attacks, including mercenary spyware. It is an optional, extreme protection setting rather than the normal iPhone configuration. Apple warns that enabling it changes everyday behavior and limits features.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Lockdown Mode does

The mode reduces exposure across several parts of iOS:

  • Apps: Some app capabilities and complex features are restricted.
  • Websites: Browser behavior is limited to reduce exposure to sophisticated web content and exploit chains.
  • Messages and media: Certain attachment, media and preview behaviors are restricted.
  • Connectivity: Some connection methods and accessories are limited.
  • Other services: Apple applies additional restrictions as new attack techniques are identified.

The exact behavior changes as Apple updates its operating systems. Lockdown Mode lowers the number of complex components an attacker can reach; it does not promise that every exploit is impossible.

Rank #2
Apple iPhone 16, 128GB, Pink - Unlocked (Renewed)
  • 6.1" Super Retina XDR OLED, HDR10, Dolby Vision, 1000nits (typ), 2000nits (HBM), 2556x1179px at 460ppi, 3561mAh Battery
  • 128GB 8GB RAM, Apple A18 (3nm), Hexa-core (2x4.04 GHz + 4x2.20 GHz), Apple GPU 5-core, 16‑core Neural Engine
  • Rear camera: 48MP, f/1.6, wide + 12MP, f/2.2, ultrawide, Front Camera: 12MP, f/1.9, wide, iOS 18, upgradable to iOS 18.5
  • 4G LTE: 1/2/3/4/5/7/8/12/13/14/17/18/19/20/25/26/28/29/30/32/34/38/39/40/41/42/48/53/66/71, 5G: n1/2/3/5/7/8/12/14/20/25/26/28/29/30/38/40/41/48/53/66/70/71/75/76/77/78/79 - Dual eSIM
  • Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Sprint., Etc.

How to enable it

  1. Update the iPhone to the latest iOS version available for that device.
  2. Open Settings, then Privacy & Security, and select Lockdown Mode.
  3. Review the feature restrictions, choose Turn On Lockdown Mode, and restart when iOS requests it.
  4. Enable the mode on every Apple device you use for sensitive work, including other iPhones, iPads and Macs. Apple says complete protection requires all Apple devices used by the person to have Lockdown Mode enabled.

That last step matters because a linked or companion device can provide another route into accounts, messages or files. A protected phone paired with an unprotected computer is not the same as a fully protected workflow.

When the restrictions are acceptable

Lockdown Mode is most defensible when a credible threat outweighs convenience: investigative journalism, work involving confidential sources, political opposition, human-rights advocacy or a public role that attracts state-backed attention. Test the mode before a critical assignment so you know which websites, attachments, collaboration tools and accessories no longer work as expected.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Android 16 Advanced Protection adds

Google describes Advanced Protection as “Google’s strongest security for mobile devices.” On supported Android 16 devices, it is a device-level setting intended for at-risk users such as journalists, elected officials and public figures. Google says Android 16 users can activate it with a single setting.

Key Android 16 controls

  • Sideloading defenses: The setting adds protection around installing apps from outside the normal app-distribution path.
  • Accessibility permissions: It adds restrictions around powerful accessibility access that malicious software can abuse to observe or control other apps.
  • Play Protect scanning: Google Play Protect continues scanning apps from multiple sources, rather than limiting checks only to apps installed through Google Play.

These controls address common ways spyware or a spyware dropper can reach a device, but they do not make Android invulnerable to a remotely delivered exploit in the operating system, browser, modem or another privileged component.

Additional Android 17 protections

Google’s 2026 Android 17 update describes further Advanced Protection features. Depending on the device, protected mode can offer optional intrusion logging, USB Protection, additional restrictions on accessibility services and disabling WebGPU. Google states that availability varies by device, so an Android 17 phone is not automatically equivalent to another Android 17 phone.

Rank #3
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
  • 6.1inch Super Retina XDR display. Aluminum with color-infused glass back. Ring/Silent switch
  • Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU
  • Advanced dual-camera system. 48MP Main | Ultra Wide. Super-high-resolution photos (24MP and 48MP). Next-generation portraits with Focus and Depth Control. 4X optical zoom range
  • Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
  • Up to 26 hours video playback. USB C, Supports USB 2. Face ID

Intrusion logging can improve post-incident investigation, while USB Protection limits a physical connection route. Disabling WebGPU removes a browser graphics feature that can add complexity, but it may affect websites or applications that depend on it. Treat these controls as risk reduction, not proof that an attack did not occur.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to turn it on

  1. Install the latest Android and Google Play system updates offered for the device.
  2. In Settings, search for Advanced Protection and open the device-level security control. The label and location can vary by manufacturer.
  3. Read the restrictions, enable the setting, and restart if the phone requests it.
  4. Confirm that the protections remain enabled after major system updates and after changing device-management or work-profile settings.

If the setting is absent, the device may not support the required Android release or hardware integration. Do not assume that installing a security app creates the same protection.

The factors that decide the safer phone

1. Exact model and update support

“Android” covers phones with different processors, vendors, update schedules and security features. Compare the exact model’s promised operating-system and security-update period, the time it usually takes to receive patches, and whether Advanced Protection features are supported. A well-maintained Android 16-compatible Pixel may be a stronger practical choice than an older Android phone that no longer receives prompt patches. Conversely, an older iPhone without current iOS support should not win solely because it is an iPhone.

On either platform, install updates promptly. Targeted exploit chains often depend on a narrow combination of bugs; leaving a known fix unapplied preserves an avoidable opening.

2. High-risk mode that you will actually keep enabled

Lockdown Mode has a mature, clearly stated purpose for high-risk iPhone users. Android Advanced Protection provides a comparable direction on supported devices, with controls that vary by release and manufacturer. The technically stronger feature is irrelevant if you disable it whenever an attachment, website or accessory becomes inconvenient.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed) | Unlocked
  • This pre-owned product is not Apple certified, but has been professionally inspected, tested and cleaned by Amazon-qualified suppliers.
  • There will be no visible cosmetic imperfections when held at an arm’s length.
  • This product is eligible for a replacement or refund within 90 days of receipt if you are not satisfied.
  • Product may come in generic Box.

3. Sideloading and permission exposure

Android’s Advanced Protection directly addresses sideloading and accessibility permissions. On iPhone, Lockdown Mode limits several app and media behaviors and reduces web attack surface. Neither approach replaces careful review of unexpected prompts, configuration profiles, device-management requests or requests for accessibility access.

4. Physical access and USB risk

Physical access changes the threat model. Google’s Android 17 description includes USB Protection in protected mode on devices that support it. Apple’s Lockdown Mode also restricts some connectivity behavior. Keep the phone locked, avoid lending it during sensitive work, and do not connect unknown USB accessories or computers.

5. Detection, alerts and investigation

Threat notifications and logs can help, but a clean notification panel is not a forensic certificate. A credible alert, unusual account activity or evidence of device tampering warrants preserving the phone and contacting a qualified incident-response or digital-forensics organization. Reinstalling, factory-resetting or deleting messages may destroy evidence before an expert can examine it.

Configuration checklist for a high-risk user

Use this sequence on whichever platform you select:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Identify the threat: Write down who might target you, what information they want and whether you travel, meet sources or hold public office.
  2. Choose current hardware: Select a phone that still receives operating-system and security updates and supports its platform’s high-risk protection.
  3. Update before setup: Install the newest available operating-system, browser and app updates before signing in to sensitive accounts.
  4. Enable the platform protection: Turn on Lockdown Mode on iPhone or Advanced Protection on a supported Android device.
  5. Review every companion device: Apply equivalent settings to tablets, computers and other Apple or Google-linked devices used for sensitive communications.
  6. Reduce account takeover risk: Use strong, unique passwords and multifactor authentication. For your most important accounts, a FIDO2 security key can provide phishing-resistant authentication.
  7. Remove unnecessary access: Uninstall apps you do not need and review accessibility, notification, device-administrator, VPN and profile permissions.
  8. Control links and files: Treat unexpected links, document previews and login requests as hostile, even when they appear to come from a known contact.
  9. Limit physical exposure: Keep the phone locked, protect the unlock code, avoid unknown USB accessories and do not leave the device unattended.
  10. Plan for an alert: Decide in advance which security team, journalist-support organization or forensic specialist you will contact. Do not wipe the phone before receiving evidence-preservation advice.

Common questions in real-world threat scenarios

Can spyware infect an iPhone without clicking anything?

Yes. Amnesty has documented zero-click attacks that compromise phones without the victim knowingly tapping a link. Lockdown Mode is intended to reduce exposure to sophisticated attacks, but it cannot guarantee immunity.

Best Value
Apple iPhone 16e, 128GB, Black - Unlocked (Renewed)
  • 6.1" Super Retina XDR OLED, HDR10, 800 nits (HBM), 1200 nits (peak), 2532x1170px at 460ppi, 4005mAh Battery
  • 8GB RAM, Apple A18 6-core CPU (2 performance + 4 efficiency cores), Apple GPU 4-core, 16‑core Neural Engine
  • Rear camera: 48MP, f/1.6, wide, Front Camera: 12MP, f/1.9, wide, iOS 18.3.1, upgradable to iOS 18.5
  • Connectivity: Global 4G LTE, Sub-6 GHz 5G, LTE, Wi-Fi 6, Bluetooth 5.3, NFC, USB-C, Wireless Charging (7.5W). (does not have mmWave 5G or MagSafe or physical SIM card) - Dual eSIM Only
  • Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Straight Talk., Etc.

Does Lockdown Mode stop targeted spyware?

It can block or narrow some attack paths by restricting apps, websites, media handling and connectivity. Apple presents it as extreme protection for people at risk, not as an absolute spyware detector or guarantee.

Is Android safer than iPhone from Pegasus-style attacks?

There is no current public, apples-to-apples infection statistic that establishes a universal winner. A supported Android 16 device with Advanced Protection may be highly appropriate, while an up-to-date iPhone with Lockdown Mode offers the clearest purpose-built baseline. Exact device support and update speed decide the practical result.

Which phone should a journalist use?

A journalist facing credible targeting should choose a current device with a high-risk mode they can keep enabled, timely security updates and a support plan for alerts. That often means an iPhone with Lockdown Mode or a well-supported Android 16-compatible device with Advanced Protection. The safer workflow also protects accounts, companion devices and source data.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Bottom line

Choose an up-to-date iPhone and enable Lockdown Mode when you face a credible risk of mercenary spyware and can accept its restrictions. Choose a current Android device with Advanced Protection when its update policy, hardware support and protected-mode features better fit your circumstances. Keep every device patched, harden your accounts, avoid sideloaded apps and suspicious links, and seek specialist help after a credible targeting alert. The platform matters, but disciplined configuration and rapid response matter just as much.

Quick Recap

Bestseller No. 1
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
Please check with your carrier to verify compatibility.; Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
$300.00
Bestseller No. 3
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU; Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
$405.00
Bestseller No. 4
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed) | Unlocked
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed) | Unlocked
There will be no visible cosmetic imperfections when held at an arm’s length.; Product may come in generic Box.
$262.00

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.