Bluetooth is a common setting that's typically always on in modern phones, but this feature may be leaving your phone open to a rather significant issue. Though Bluetooth requires a user's consent before pairing with another device, that doesn't mean hackers can't slip through the cracks. A notable case was the discovery of a Bluetooth vulnerability in Fitbits specifically, as well as other hardware that makes use of the tech. Those vulnerabilities, based on open-source algorithms that can allow malicious actors to decode a user's location, are only the tip of the iceberg. Recent research from Insinuator reportedly found a vulnerability in Airoha-based hardware that would allow attackers within Bluetooth range to, among other things, eavesdrop on conversations and siphon personal data (including phone numbers, contacts, and call history).

Best practices for Bluetooth safety include keeping Bluetooth off when it's not in use, which limits the window within which your device is vulnerable, making all manner of hacker attacks (such as "bluebugging" or "bluesnarfing") less likely. Users should set Bluetooth to "hidden" mode, as opposed to "discoverable" mode, and remember to unpair phones from rental cars or vehicles before selling them. Using Bluetooth with wireless Android Auto opens further points of vulnerability, so users can disable automatic startup via the "Start Android Auto Automatically" setting.

iPhone users should also disable the Live Listen feature, which streams audio from the phone's microphone to AirPods via Bluetooth, creating an additional vulnerability. Bluetooth vulnerabilities continue to surface, including a flaw found in 17 Google Fast Pair audio devices where researchers from KU Leuven University found hackers could track location data and eavesdrop by knowing a device's model number. Keeping Bluetooth switched off when not in use, while adhering to FCC recommendations, can significantly improve personal security and protect personal data.