Add & remove certificates

If an app or network that you want to use needs a certificate that you don't have, you can install that certificate manually.

Digital certificates identify computers, phones, and apps for security. Just like you'd use your driver’s license to show that you can legally drive, a digital certificate identifies your phone and confirms that it should be able to access something.

Important: Some of these steps work only on Android 9 and up. Learn how to check your Android version.

Install a certificate

  1. Open your phone's Settings app.
  2. Tap Security And then Advanced And then Encryption & credentials.
  3. Under "Credential storage," tap Install a certificate And then Wi-Fi certificate.
  4. In the top left, tap Menu .
  5. Under "Open from," tap where you saved the certificate.
  6. Tap the file.
    • If needed, enter the key store password. Tap OK.
  7. Enter a name for the certificate.
  8. Tap OK.

Tip: If you haven't already set a PIN, pattern, or password for your phone, you'll be asked to set one up.

Remove custom certificates

Important: Removing certificates you've installed doesn't remove the permanent system certificates that your phone needs to work. But if you remove a certificate that a certain Wi-Fi connection requires, your phone may not connect to that Wi-Fi network anymore.

  1. Open your phone's Settings app.
  2. Tap Security And then Advanced And then Encryption & credentials.
  3. Under "Credential storage":

    • To clear all certificates: Tap Clear credentials And then OK.
    • To clear specific certificates: Tap User credentials And then Choose the credentials you want to remove.

Use WPA-Enterprise Wi-Fi

Important: If you’re missing any info, you may not be able to connect to your network.

You can use a WPA/WPA2/WPA3-Enterprise configuration for more security. To connect to WPA/WPA2/WPA3-Enterprise network:

  1. Open your phone's Settings app.
  2. Tap Network & internet And then Wi-Fi And then Add network Add.
  3. Enter the network info provided by your network administrator.

“Do not validate” changes & fixes

Important: The “Do not validate” setting option used in EAP-PEAP, EAP-TLS, and EAP-TTLS configurations has been removed for security reasons. It was removed in the Android 11 feature update release.

Can’t find the “Do not validate” option
Whether you’re an individual or part of an institution, you can use a WPA/WPA2/WPA3-Enterprise setting.
Tip: Network administrators need to provide you with certain info before you can connect to a WPA/WPA2/WPA3-Enterprise network.
Fix network settings that were already saved
Important: If you’re missing any info, you may not be able to reconfigure your network.

Saved Enterprise configurations that are set up to turn off server certificate validation aren’t affected. But you can’t create new or edit saved settings.

To make your network more secure, fix less secure configurations.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue