Add and remove certificates

If an app or network that you want to use needs a certificate that you don't have, you can install that certificate manually.

Digital certificates identify computers, phones, apps and other devices for security. Just like you'd use your driver’s licence to show that you can legally drive, a digital certificate identifies your device and confirms that it should be able to access something.

Important: Some of these steps work only on Android 9 and up. Learn how to check your Android version.

Install a certificate

1. Open your device's Settings app.
2. Tap Security and privacy More security settings Encryption and credentials.
3. Tap Install a certificate Wi-Fi certificate.
4. Tap Menu .
5. Tap where you saved the certificate.
6. Tap the file.
   • If needed, enter the key store password. Tap OK.
7. Enter a name for the certificate.
8. Tap OK.

Tip: If you haven't already set a PIN, pattern, or password for your device, you'll be asked to set one up.

Remove custom certificates

Important: Removing certificates you've installed doesn't remove the permanent system certificates that your device needs to work. But if you remove a certificate that a certain Wi-Fi connection requires, your device may not connect to that Wi-Fi network anymore.

1. Open your device's Settings app.
2. Tap Security and privacy More security settings Encryption and credentials.

3. Under 'Credential storage':

   • To clear all certificates: Tap Clear credentials OK.
   • To clear specific certificates: Tap User credentials Choose the credentials you want to remove.

Use WPA-enterprise Wi-Fi

Important: If you’re missing any info, you may not be able to connect to your network.

You can use a WPA/WPA2/WPA3-Enterprise configuration for more security. To connect to WPA/WPA2/WPA3-Enterprise network:

1. Open your device's Settings app.
2. Tap Network and Internet Internet Add network .
3. Enter the network info provided by your network administrator.

 'Do not validate' changes and fixes

Important: The 'Do not validate' setting option used in EAP-PEAP, EAP-TLS and EAP-TTLS configurations has been removed for security reasons. It was removed in the Android 11 feature update release.

Can’t find the 'Do not validate' option

Whether you’re an individual or part of an institution, you can use a WPA/WPA2/WPA3-enterprise setting.

Tip: Network administrators need to provide you with certain info before you can connect to a WPA/WPA2/WPA3-enterprise network.

Fix network settings that were already saved

Important: If you’re missing any info, you may not be able to reconfigure your network.

Saved enterprise configurations that are set up to turn off server certificate validation aren’t affected. But you can’t create new or edit saved settings.

To make your network more secure, fix less secure configurations.