Bluetooth Security Flaws Explained (BlueFrag, BlueBorne, KNOB) and How to Stay Safe

Bluetooth security flaws are found every year. Well-known examples include BlueBorne (2017), KNOB (2019), BlueFrag (2020), BLURtooth (2020), BrakTooth (2021) and BLUFFS (2023). The worst of them let an attacker within radio range take over a device or spy on its connections without the owner touching anything. Most are fixed through software and firmware updates, so the most important protection is keeping phones, computers and earbuds updated. Beyond that, decline pairing requests you did not start, keep devices not discoverable except while pairing, remove old pairings you no longer use, and turn Bluetooth off in crowded public places if you are not using it. Real attacks are rare, because the attacker must be close by, but updates are cheap insurance.

Ethan read a headline about a Bluetooth flaw "that lets hackers take over your phone without touching it" and asked Jake whether he should stop using his wireless earbuds. Jake's answer was calm: the flaw was real, but it had been fixed in a security update months earlier, and Ethan's phone had installed it automatically. The bigger risks were his old laptop, which had not had a driver update in years, and his habit of leaving Bluetooth discoverable. Jake updated the laptop's Bluetooth driver, removed a dozen old pairings from devices Ethan no longer owned, and showed him how to tell a pairing request he expected from one he did not. Ethan kept his earbuds. This page explains the major Bluetooth flaws and the habits that make them harmless.

This page explains published research and vendor fixes for general understanding. It describes what flaws allowed, not how to use them.

Why Bluetooth has so many security flaws

Bluetooth is complicated. The specification runs to thousands of pages, covering two different radio systems, Classic (BR/EDR) and Low Energy, many profiles for audio, files, keyboards and health devices, and several generations of pairing and encryption methods kept for compatibility with older devices. Every chip maker and operating system implements its own version of this stack, in code that runs with high privileges and processes data from any nearby device. That combination, complex code, high privileges and exposure to strangers within radio range, is exactly where security flaws tend to appear.

Flaws come in two kinds. Implementation bugs, mistakes in one vendor's code, affect particular devices and are fixed by that vendor's update. Specification flaws, weaknesses in the Bluetooth standard itself, can affect devices from many makers and are fixed by changing the specification and updating devices to follow it. Both are fixed through updates, which is why the advice always comes back to keeping devices current.

Bluetooth versions and security

Newer Bluetooth versions added stronger security. Bluetooth 4.2 introduced LE Secure Connections, using modern key exchange for Low Energy devices, and later versions tightened requirements, such as minimum encryption key lengths after KNOB. Devices still support older modes for compatibility, which is why some attacks force a downgrade to weaker methods. When buying new accessories, newer Bluetooth versions and devices from makers that publish firmware updates offer better protection. The version alone does not guarantee safety, though; implementation quality and updates matter as much.

You can usually find a device's Bluetooth version on its specification sheet; for phones and laptops, anything from the last few years supports the modern secure pairing modes.

The major Bluetooth flaws

Each of these was discovered by security researchers and disclosed to vendors and the Bluetooth Special Interest Group, the body that manages the standard, before publication, so fixes were in progress or available when the news broke.

SweynTooth, BrakTooth and flaws in Bluetooth chips

Many Bluetooth flaws live in the firmware of the small chips that handle the radio, rather than in the phone's operating system. In 2020, researchers at the Singapore University of Technology and Design disclosed SweynTooth, a set of flaws in Bluetooth Low Energy chips from several manufacturers, used in fitness trackers, smart locks, medical devices and other small gadgets. The same group followed in 2021 with BrakTooth, over a dozen flaws in Bluetooth Classic chips from many vendors, found in laptops, phones, audio devices and development boards. Most of these flaws could crash or freeze a device, and a few allowed more serious attacks.

Chip flaws are harder to fix than operating system flaws. The chip maker has to fix the firmware first, then pass it to every device maker that uses the chip, and each device maker has to test it and ship it to customers. Large brands usually manage this within months. Small brands selling cheap gadgets often never do, which is why the advice to prefer makers with a record of updates keeps coming up.

Earbuds and headphones

Earbuds and headphones are the Bluetooth devices people update least, because their updates arrive through a companion app that many owners never open. Yet they contain the same kinds of chips as other devices. In 2025, the German security firm ERNW, the same team behind BlueFrag, reported flaws in Bluetooth audio chips from Airoha that are used in headphones and earbuds from many well-known brands. The flaws could let a nearby attacker connect to the headphones without pairing, and potentially use the trust between the headphones and the paired phone. Fixes depended on each headphone maker releasing new firmware.

The practical step is simple. Install the maker's app for your earbuds or headphones, check for firmware updates every few months, and accept them when offered. If the maker no longer offers an app or updates for an older pair, the risk is low for most people, but they are a reasonable candidate for replacement when you next upgrade.

Fake keyboard attacks

A Bluetooth keyboard can type anything, which makes keyboard pairing a sensitive area. In December 2023, researcher Marc Newlin disclosed a flaw, tracked as CVE-2023-45866, that let an attacker in range pair a fake Bluetooth keyboard with vulnerable Android, Linux, macOS and iOS devices without the user confirming, and then type commands. Google fixed it for supported Android versions in its December 2023 security update, and Apple and Linux distributions released fixes as well. Older Android phones without the update stayed vulnerable while Bluetooth was on.

The lesson goes beyond that one flaw. If a device ever says a keyboard has connected when you did not pair one, turn Bluetooth off, check the paired device list, and install any pending updates.

Bluetooth pop-up spam

In 2023, people on trains, planes and at conferences began reporting floods of fake pairing pop-ups on their iPhones, asking them to connect to headphones or Apple TVs that did not exist. The pop-ups were caused by inexpensive devices broadcasting fake Bluetooth Low Energy advertisements that imitated Apple products. Similar spam was later aimed at Android and Windows. The pop-ups were mostly a nuisance, but they could make phones hard to use and, on some versions, caused crashes. Apple and others released updates that reduced the effect.

If you see a flood of pairing pop-ups, dismiss them and do not tap Connect. Turning Bluetooth off from Settings, rather than from Control Center on an iPhone, stops them completely until you move away.

BlueFrag: the 2020 Android flaw this page first covered

BlueFrag, tracked as CVE-2020-0022, was a flaw in Android's Bluetooth component found by researchers at the German security firm ERNW. On Android 8 and 9, an attacker within Bluetooth range who knew the phone's Bluetooth address could potentially run code on the phone without any interaction, as long as Bluetooth was on. On Android 10, the same bug could crash the Bluetooth service rather than give control. Google fixed it in the February 2020 Android security update.

The researchers recommended that people without the update keep Bluetooth off when not needed and set phones to non-discoverable. BlueFrag was a good example of the most serious class of Bluetooth flaw, remote code execution with no clicks, and of how quickly an update closes it for phones that receive updates.

How researchers find Bluetooth flaws

Researchers find Bluetooth flaws mostly through fuzzing, automatically sending huge numbers of malformed messages to a device's Bluetooth stack and watching for crashes, and through careful study of the specification for logical weaknesses. When they find a flaw, they report it privately to the affected vendors and the Bluetooth Special Interest Group, which coordinates fixes across the industry before the details are published. Bug bounty programs at major companies reward these reports, as our guide to how bug bounties work explains, which encourages more research and faster fixes.

Many published flaws come with free test tools from the researchers, so device makers and security teams can check whether their products are affected; these tools are aimed at professionals rather than everyday users.

BlueBorne: the 2017 wake-up call

In 2017, the security company Armis disclosed BlueBorne, a set of flaws affecting Android, Windows, Linux and older versions of iOS. An attacker in range could, on vulnerable devices, take control without pairing or any action by the user, simply because Bluetooth was turned on. At the time, billions of devices were affected, including smart TVs and other connected devices that rarely received updates. Major vendors released fixes, but many older and embedded devices never did, which illustrated a lasting problem: phones and computers get patched, while cheap gadgets often do not.

Armis estimated that around 5.3 billion devices were exposed when BlueBorne was announced in September 2017. The flaws were reported to Google, Microsoft, Apple and Linux maintainers months earlier, so patches for current phones and computers were ready on the day of disclosure. Apple devices on iOS 10 and later were not affected. The devices left exposed were mostly older Android phones that their makers had stopped updating, along with smart TVs, speakers and other gadgets with Bluetooth built in that had no easy way to get new software.

Bluejacking and bluesnarfing: the early days

Bluetooth security problems are not new. In the early 2000s, bluejacking, sending unsolicited messages to nearby phones, was more prank than threat. Bluesnarfing was more serious: flaws in some phones of that era let attackers copy contacts, messages and calendars without permission. Those problems were fixed in later phones, but they set the pattern still seen today, with researchers finding flaws, vendors patching them, and older devices that never get patched remaining vulnerable.

The lesson from that era still applies: features that let strangers' devices interact with yours, like open file sharing, need sensible defaults and occasional review.

KNOB, BIAS and BLUFFS: flaws in the standard

Some attacks targeted the Bluetooth standard rather than any one vendor's code. KNOB (Key Negotiation of Bluetooth), disclosed in 2019, showed that an attacker could trick two devices into agreeing on an extremely weak encryption key, then decrypt their traffic. BIAS (Bluetooth Impersonation Attacks), in 2020, showed how an attacker could impersonate a device the victim had paired with before. BLUFFS, in 2023, showed weaknesses in how session keys are derived that could expose future sessions. The fixes involved changes to the specification, such as requiring minimum key lengths, and updates to operating systems and firmware to enforce them.

These attacks typically needed the attacker to be within range while the targeted devices were connecting, which limits their practical use, but they showed that even correct implementations of the standard could be vulnerable.

KNOB, tracked as CVE-2019-9506, was found by Daniele Antonioli, Nils Ole Tippenhauer and Kasper Rasmussen. The key negotiation in Bluetooth Classic allowed encryption keys with as little as one byte of entropy, and the negotiation itself was not protected, so an attacker in range could quietly push both devices down to that minimum and then try every possible key in a short time. Both devices had to be vulnerable, and the attacker had to be present while they connected. Microsoft, Apple, Google and chip makers shipped updates in August 2019, and the Bluetooth Special Interest Group changed the specification to recommend a minimum key length of seven bytes.

The same researchers published BIAS in 2020, which exploited the way paired devices skip full authentication when they reconnect. BLUFFS, published by Antonioli in 2023 and tracked as CVE-2023-24023, affected Bluetooth versions 4.2 through 5.4 and worked by forcing the reuse of weak session keys. Because these flaws are in the standard rather than one product, they affected devices from almost every maker, and the fixes came as a mix of specification changes and individual vendor updates.

Updates: the defense that matters most

Nearly every Bluetooth flaw is fixed by an update somewhere: the phone's operating system, a computer's Bluetooth driver, or the firmware inside earbuds, speakers, keyboards and cars. Phones usually handle this automatically. Computers and accessories need more attention:

• Phones: install system updates and monthly security patches promptly; our guide to how Android gets security updates explains the process.
• Windows PCs: Windows Update delivers many driver fixes; also check the PC or Bluetooth adapter maker's support page for newer Bluetooth drivers, especially on older laptops.
• Earbuds and headphones: firmware updates arrive through the maker's app or, for some brands, automatically through the phone.
• Cars, speakers and smart devices: check the maker's app or website; many receive few updates, which is a reason to be cautious with old ones.

Ethan's phone was protected by an automatic update; his old laptop, with a Bluetooth driver years out of date, was the real weak spot.

How to check if your device is patched

Most people never need to look up a specific flaw. What matters is whether the device is current. On an Android phone, open Settings > About phone or Settings > Security and find the Android security update or security patch level date. A date within the last two or three months means the phone is getting regular fixes. A date more than a year old means it has stopped receiving them, or that updates are waiting to be installed.

On an iPhone or iPad, open Settings > General > Software Update. If it says the software is up to date and the device is still supported, you have Apple's latest fixes. On Windows, open Settings > Windows Update and select Check for updates. On a Mac, open System Settings > General > Software Update. For earbuds, watches and smart home devices, the maker's app shows the firmware version and offers updates.

Bluetooth compared with Wi-Fi risks

People often ask whether Bluetooth or Wi-Fi is riskier. They carry different kinds of risk. Bluetooth attacks need the attacker within a short distance, often a few yards to a few dozen yards, and most target the device's own radio software. Public Wi-Fi risks are more about the network: fake hotspots with names like the real one, and other users on the same network. Both are reduced by the same habits of keeping devices updated, turning off what you are not using, and not connecting to things you do not recognize. Neither is a reason to give up wireless accessories.

For everyday users, the realistic risks of Bluetooth are losing privacy through tracking and having an old, unpatched device exposed in a crowded place. Remote takeovers like BlueBorne and BlueFrag are serious when they appear, but they are patched quickly on supported devices, and there are few public reports of them being used against ordinary people.

What to do after a Bluetooth flaw headline

1. Check whether your devices are named as affected, usually listed in the vendor's advisory.
2. Install any available updates for phones, computers and accessories.
3. If no update is available yet, keep Bluetooth off when not in use.
4. Review paired devices and remove unknown or unused ones.
5. Watch for the update and install it when it arrives.

Most of the time, step two is all that is needed, because the fix shipped before the headline.

Headlines often say that billions of devices are affected. That figure counts every device using the affected chip or software, including many that were patched before the story ran, so it says more about how common Bluetooth is than about your own risk.

Pairing safely

Pairing is when two devices exchange keys and agree to trust each other. Most attacks and scams around Bluetooth target this moment. Accept pairing requests only when you started pairing yourself, with a device you can see. If a request appears out of nowhere, decline it. When a numeric code appears on both devices, check that the numbers match before confirming; that comparison protects against an attacker sitting in the middle. Our guide to Bluetooth PINs and passkeys explains the codes you may see.

Pair new devices at home rather than in a crowded café or airport, where an attacker is more likely to be nearby and to try to interfere during the brief pairing window.

AirDrop, Quick Share and nearby sharing

Nearby file sharing features use Bluetooth to find devices and Wi-Fi to send files: AirDrop on Apple devices, Quick Share on Android and Windows, and Windows' Nearby sharing. Set them to receive from contacts only or turn receiving off when not needed, since open receiving lets strangers send you unsolicited files or images. Apple limited AirDrop's Everyone setting to ten minutes at a time in 2022, which reduced unwanted sharing in public. Decline files you were not expecting, especially from names you do not recognize.

On Windows, Nearby sharing settings are in Settings > System > Nearby sharing, where My devices only is the safer everyday choice.

Discoverable mode and visibility

When a device is discoverable, it broadcasts its presence so others can find and pair with it. Phones and computers usually become discoverable only while the Bluetooth settings screen is open, then stop. On Windows, the Bluetooth settings page makes the PC discoverable while it is open; close it when you have finished pairing. Some older devices and accessories stay discoverable permanently, which makes them easier to find and target. Keeping devices non-discoverable except when pairing reduces how visible you are, though connected devices still exchange signals that skilled attackers can detect.

Modern phones make this easier than older ones did. Android and iPhone are only visible to new devices while the Bluetooth settings screen is open, and they hide again when you leave it. Windows PCs work much the same way in current versions.

Remove pairings you no longer use

Every paired device is trusted. Over the years, phones and computers collect pairings with old headphones, rental cars, friends' speakers and devices long since sold. Removing them reduces the list of devices that your phone or PC will accept automatically, and clears out pairings made with older, weaker security. On Windows, open Settings > Bluetooth & devices > Devices, select a device you no longer use, and choose Remove device; our guide to removing Bluetooth devices covers it, and our page on devices stuck on removing helps when that fails. On phones, open the Bluetooth settings and forget old devices.

Rental cars deserve special mention: when you pair a phone with a rental car, the car may keep your phone's name, contacts and call history. Delete your phone from the car's system before returning it.

Clear old pairings on a phone

1. Open Settings and go to Bluetooth (on Android, often under Connected devices).
2. Look through the list of previously connected devices.
3. Select any device you no longer own or use.
4. Choose Forget, Unpair or Forget This Device.
5. Repeat for others, keeping only devices you use regularly.

It takes a minute and is worth repeating every few months; Ethan's phone held pairings with three cars he had rented on trips years earlier.

Also check smartwatches and fitness bands for their own lists of paired phones, and remove ones from previous phones.

Clearing old pairings can also fix connection problems, since phones sometimes try to reconnect to old devices before the one you want.

How worried should you be?

Bluetooth attacks have real limits. The attacker must be physically nearby, usually within about 10 meters for most phones and accessories, somewhat further with special equipment. Many attacks need specific conditions, such as the device being discoverable or in the middle of pairing. And widely publicized flaws are usually fixed before they appear in news headlines. As a result, most people are far more likely to face phishing, password reuse or malicious apps than a Bluetooth attack.

The risk is higher for people who might be deliberately targeted, such as executives, journalists and officials, for anyone using devices that no longer receive updates, and in crowded places where an attacker can wait for victims. For everyone else, updates and sensible pairing habits reduce the risk to very low.

Bluetooth security myths

• "Bluetooth is too short-range to matter." Range is limited, but crowded places put many people within it.
• "Turning Bluetooth off is the only protection." Updates fix the flaws; turning it off adds a layer.
• "Only phones are at risk." Laptops, cars, earbuds and smart devices have had flaws too.
• "Pairing makes a device safe." Some flaws target paired devices or the pairing process itself.
• "Newer Bluetooth versions cannot be attacked." They are stronger, but new flaws keep being found.

The myth that does the most harm is the first one. It leads people to skip updates for earbuds, cars and laptops because Bluetooth feels too local to matter, when crowded trains, offices and cafes put dozens of strangers within range every day.

Older phones that no longer get updates

A phone that no longer receives security updates stays vulnerable to every Bluetooth flaw fixed after its last update. If you still use one, keep Bluetooth off except when needed, avoid pairing in public places, and do not use it for banking or sensitive accounts. Old phones repurposed as music players or alarm clocks are fine on a home network with Bluetooth off. When choosing a new phone, check how many years of security updates the maker promises; several now commit to many years of support.

The same applies to tablets and laptops past their update window; keeping Bluetooth off on them is an easy way to reduce risk.

Signs something may be wrong

• Pairing requests appearing when you are not pairing anything.
• Unknown devices in your paired list.
• Bluetooth turning on by itself, beyond features like Find My that use it.
• Unexpected files or messages through nearby sharing.
• Accessories connecting to a device that is not yours.

Most of these have innocent explanations, such as a family member's device or a feature using Bluetooth in the background, but they are worth checking. Remove unknown pairings, update the device, and if problems continue, reset network or Bluetooth settings.

Writing down what you saw, with the time, helps if you later need to ask a store or support team for advice.

Cars and Bluetooth

Cars connect to phones for calls, music and maps, and they store information from every phone ever paired: names, contacts and call logs. Car infotainment systems receive updates less often than phones, and researchers have shown Bluetooth flaws in some car systems. Keep your car's software updated through the dealer or over-the-air updates, avoid pairing with cars you do not own unless needed, and delete your phone from any car you sell, rent or borrow. When selling a car, use its factory reset option to clear stored phone data.

Some cars also let you set a PIN for new pairings or disable pairing when parked; check the car's settings menu.

Smart home and wearable devices

Smart locks, lights, fitness trackers, smartwatches and medical devices often use Bluetooth Low Energy. Their security varies widely, and many cheap devices rarely receive updates. Prefer devices from makers with a track record of security updates, install firmware updates through their apps, and for security-critical devices such as smart locks, look for independent security reviews before buying. Health devices that connect to phones are regulated in many countries, and their makers publish security advisories when flaws are found.

If a smart device's maker has stopped updating it, consider whether it controls anything important, such as a door, and replace it if so.

Bluetooth on children's and older relatives' devices

Children's tablets, game controllers and smartwatches, and the phones of older relatives, are often the least updated devices in a household. They are also the ones most likely to accept a pairing pop-up without reading it. When you set up or check these devices, turn on automatic updates, set nearby sharing to contacts only, and explain the one rule that matters most: never accept a pairing request or a file you were not expecting. For a young child's tablet, Bluetooth can usually stay off unless headphones are in use.

A quick look at these devices during holiday visits catches most problems. Check that updates are installing, remove pairings with old cars and speakers, and confirm the device still receives security updates at all. A relative's phone that stopped getting updates years ago is a better reason to help with an upgrade than any single Bluetooth headline.

Should you turn Bluetooth off in public?

Turning Bluetooth off when you are not using it removes the radio as a way in, and security agencies have long recommended it for sensitive situations. In practice, many people rely on Bluetooth all day for earbuds, watches and car connections, and turning it off constantly is inconvenient. A sensible middle ground is to keep devices updated, leave Bluetooth on when you are using it, and turn it off in crowded places such as airports and conferences if you are not using any accessories, or if you are carrying a device that cannot be updated. Note that on recent iPhones and some Android phones, the quick toggle in the control panel may only disconnect accessories rather than turn the radio fully off; use the Settings app to switch it off completely.

Bluetooth safety while traveling

Airports, train stations and conferences combine crowds, long waits and many devices, which makes them the places where Bluetooth precautions matter most. Before traveling, update your phone, laptop and earbuds. In transit, keep only the accessories you are using connected, turn off nearby sharing or limit it to contacts, and decline any unexpected pairing request. Avoid pairing new devices in public. Rental cars and hotel speakers are worth skipping unless needed; if you do pair, remove your phone before leaving.

Hotel rooms often have Bluetooth speakers or TVs that keep a list of every phone paired with them. If you used one, remove your phone from its list before checking out, and forget the speaker on your phone too.

Bluetooth and tracking

Bluetooth raises privacy questions too. Devices broadcast signals that shops and venues can use to count visitors or track movement, though modern phones use randomized addresses to limit this. Bluetooth trackers, used to find lost keys and bags, can be misused to follow people; both Android and iPhone now warn you if an unknown tracker seems to be traveling with you. Our guide to what data your phone sends covers unknown tracker alerts and location settings.

In shops and public spaces, turning Bluetooth off when not in use also stops your devices appearing in visitor-counting systems, a small privacy gain on top of the security one.

Bluetooth security on Windows

On Windows 11, Bluetooth settings live under Settings > Bluetooth & devices. Keep the PC's Bluetooth driver up to date through Windows Update and the maker's support page. Turn Bluetooth off from Quick Settings when you do not need it. Review paired devices periodically. If Bluetooth is missing or misbehaving after updates, our guides to Bluetooth missing in Windows and pairing and connecting devices walk through fixes. Organizations can restrict Bluetooth through device management policies, for example allowing only audio devices or blocking file transfers.

If your PC has a Bluetooth adapter you never use, such as on a desktop, disabling it in Device Manager removes it entirely until you need it.

Windows also lets you limit which devices can find your PC. In Settings > Bluetooth & devices > Devices, under more Bluetooth settings, you can turn off the option that allows Bluetooth devices to find the PC once your own accessories are paired. On a desktop PC that uses wired keyboards and speakers, there may be no need for Bluetooth at all, and turning it off removes the risk entirely.

For businesses and IT teams

Organizations manage Bluetooth risk at scale. Device management tools can restrict which Bluetooth services are allowed, for example permitting audio headsets while blocking file transfer, and can enforce driver and firmware updates. Security teams track Bluetooth advisories from vendors and update fleets promptly when serious flaws appear. Inventorying Bluetooth-enabled equipment, including printers, scanners and conference room devices, helps spot older gear that no longer receives updates. For high-security areas, some organizations ban Bluetooth entirely.

Bluetooth also belongs in the security awareness training staff already receive. That means declining unexpected pairing requests, not plugging in or pairing unknown keyboards and mice, and reporting lost company headsets or laptops quickly so their pairings can be removed.

Update the Bluetooth driver on Windows

1. Run Windows Update and install any offered updates, including optional driver updates under Advanced options > Optional updates.
2. Find your PC's model, or the Bluetooth adapter's model, in Device Manager > Bluetooth.
3. Visit the PC or adapter maker's support page and download the latest Bluetooth driver for your Windows version.
4. Install it and restart the PC.
5. Check the driver date and version in the adapter's Properties > Driver tab.

On many laptops, Bluetooth shares a chip with Wi-Fi, so the maker's wireless driver package updates both.

Avoid driver download sites other than the PC or chip maker's; third-party driver sites sometimes bundle unwanted software.

What this page said in 2020

The original version of this page, from February 2020, reported BlueFrag shortly after Google's fix, warning Android users to update. Since then, several more Bluetooth flaws have been disclosed, some in the standard itself. The pattern has stayed the same: researchers find a flaw, vendors fix it, and devices that receive updates are protected. This rewrite adds the history and the habits that keep Bluetooth safe.

The number of named flaws since then shows that Bluetooth research is active, which is good news: flaws found by researchers are flaws fixed before criminals can rely on them.

The habits in one list

Taken together, the advice on this page comes down to a short set of habits. Update phones, computers, earbuds and cars when updates are offered. Decline pairing requests you did not start, and never pair a keyboard you do not recognize. Keep devices not discoverable except while pairing. Remove pairings you no longer use, on both the phone and the other device. Set AirDrop, Quick Share and nearby sharing to contacts or your own devices. Turn Bluetooth off in crowded places on older phones that no longer receive updates. Prefer accessories from makers that publish firmware updates.

Ethan added the rest of the list after his evening with Jake. He opened his earbuds' app for the first time in two years and installed a firmware update, removed the rental car pairings from his phone, and switched Quick Share to contacts only. The whole check took less than half an hour.

Bluetooth security flaws: frequently asked questions

Ethan still wears his earbuds every day. His phone updates itself, his laptop's Bluetooth driver is current, and his list of paired devices is down to the four he actually uses. The headline that worried him described a real flaw that had already been fixed. That is the usual story with Bluetooth security: serious research, quiet fixes, and a small set of habits that keep everyone else safe.

Revision note. Written October 3, 2026, rewriting our 2020 news note on the BlueFrag Android flaw into a complete guide to Bluetooth security flaws and staying safe. May every device that pairs with yours be one you invited.