A new leak reveals Google is developing an Intrusion Logging feature for Android 16. This tool, spotted in Google Play Services code, would let users enable encrypted logs of device activity. If suspicious behavior is detected, users could be connected to a trusted expert for help.

The feature appears to be an evolution of earlier rumors about Intrusion Detection. Instead of alerting users, this version preserves detailed logs—including device connections, app installs, and browsing history—for up to 12 months on Google's servers. Users cannot delete them manually; they auto-expire after a year.

While the feature seems nearly ready, its release date is unknown. Google recently launched Android 16 QPR3 Beta 2 for Pixel users, suggesting more updates are coming. Intrusion Logging might debut in a future quarterly release, offering a new layer of device security for Android users.