Add and remove certificates

If an app or network that you want to use needs a certificate that you don't have, you can install that certificate manually.

Digital certificates identify computers, phones and apps for security. Just like you'd use your driver’s licence to show that you can legally drive, a digital certificate identifies your phone and confirms that it should be able to access something.

Important: Some of these steps work only on Android 9 and up. Learn how to check your Android version.

Install a certificate

  1. Open your phone's Settings app.
  2. Tap Security And then Advanced settings and then Encryption and credentials.
  3. Tap Install a certificate And then Wi-Fi certificate.
  4. At the top left, tap Menu Menu.
  5. Tap where you saved the certificate.
  6. Tap the file.
    • If needed, enter the key store password. Tap OK.
  7. Enter a name for the certificate.
  8. Tap OK.

Tip: If you haven't already set a PIN, pattern or password for your phone, you'll be asked to set one up.

Remove custom certificates

Important: Removing certificates that you've installed doesn't remove the permanent system certificates that your phone needs to work. But if you remove a certificate that a certain Wi-Fi connection requires, your phone may not connect to that Wi-Fi network anymore.

  1. Open your phone's Settings app.
  2. Tap Security And then Advanced settings and then Encryption and credentials.
  3. Under 'Credential storage':

    • To clear all certificates: Tap Clear credentials And then OK.
    • To clear specific certificates: Tap User credentials And then Choose the credentials that you want to remove.

Use WPA-enterprise Wi-Fi

Important: If you’re missing any info, you may not be able to connect to your network.

You can use a WPA/WPA2/WPA3-enterprise configuration for more security. To connect to WPA/WPA2/WPA3-enterprise network:

  1. Open your phone's Settings app.
  2. Tap Network and Internet And then Internet And then Add network Add.
  3. Enter the network info provided by your network administrator.

 'Do not validate' changes and fixes

Important: The 'Do not validate' setting option used in EAP-PEAP, EAP-TLS and EAP-TTLS configurations has been removed for security reasons. It was removed in the Android 11 feature update release.

Can’t find the 'Do not validate' option
Whether you’re an individual or part of an institution, you can use a WPA/WPA2/WPA3-enterprise setting.
Tip: Network administrators need to provide you with certain info before you can connect to a WPA/WPA2/WPA3-enterprise network.
Fix network settings that were already saved
Important: If you’re missing any info, you may not be able to reconfigure your network.

Saved enterprise configurations that are set up to turn off server certificate validation aren’t affected. But you can’t create new or edit saved settings.

To make your network more secure, fix less secure configurations.

Need more help?

Sign in for additional support options to quickly solve your issue

Clear search
Close search
Google apps
Main menu
Search Help Centre