Google has added system-wide support for Encrypted Client Hello (ECH) to Android 17, becoming the first major mobile operating system to do so. The feature encrypts the destination of an HTTPS connection from the outset, reducing the ability of internet service providers and others to identify which websites or services a user is accessing. This matters because visible domain data can be used for profiling, targeted advertising and phishing.

ECH will be enabled by default on Android 17, though it does not provide complete anonymity. Providers may still see the content delivery network being used and the amount of data transferred; ECH also does not hide DNS look-ups or a user’s IP address, for which encrypted DNS and a VPN would be needed respectively. Google has also introduced a carrier-controlled option to disable 2G by default, intended to reduce abuse by SMS blasters.