android.permission.WRITE_EXTERNAL_STORAGE

Risk Level: HIGH

What does it do?

Gives the app read and write access to your phone’s shared storage (e.g., Downloads, Photos, Music folders).

Why is it dangerous?

  1. Ransomware: This is the key permission for mobile ransomware. The malware reads your personal photos/documents, encrypts them, and demands payment to unlock them.
  2. Data Theft: Allows stealing personal files, backups, and photos.
  3. Malware Dropping: An app can download a malicious APK to the Downloads folder and trick you into installing it.

Legitimate Uses

Note

On newer Android versions (Android 10+), this permission is being replaced by “Scoped Storage”, which is safer. However, older apps and malware still target this legacy permission.

Verdict

Grant only to trusted apps that need to manage files.