Android 17: New Features, AI, and Security in the 2026 Version

The Android 17 is no longer a rumor: Google took the stage at The Android Show on May 12, 2026, and showcased a system that describes itself, in no uncertain terms, as an "intelligence system" — no longer just an operating system. The stable version arrives in June, aligned with Google I/O 2026, and brings changes that go far beyond a new wallpaper. In this guide, I've separated what truly matters in Android 17: Gemini Intelligence running on-device, brakes against banking scams, dictation that understands context, and the first official bridge with iOS for data migration.

TL;DR

The Android 17 stable version launches in June 2026, aligned with Google I/O.

Gemini Intelligence transforms the assistant into an agentic AI, running on-device via Gemini Nano v3 and in the private cloud (Private AI Compute).

Banking security features: anti-scam blocking in partnership with Nubank and Itaú, up to 3-hour delay in third-party app access to SMS OTPs, call spoofing detection.

Productivity news: Rambler (dictation that filters speech noise), Create My Widget (generates widgets via natural language), Screen Reactions, Pause Point, and wireless migration to Android from iOS.

Requires high-end device: modern processor, minimum 12 GB RAM, and support for Gemini Nano v3 — debuts on Galaxy Z Fold 8, Pixel 10, and Galaxy S26.

When Android 17 Arrives: Launch Timeline

The stable version of Android 17 is expected in June 2026, right after Google I/O, which took place on May 20. The beta cycle began in late 2025 and matured with Beta 3, which ran on Vivo X300 Pro and iQOO 15 devices, outside the Pixel family — a sign that Google expanded the testing program to partners before the stable launch.

Android 17 will first arrive on the Pixel line (Pixel 6 or higher, depending on the feature) and then on the Galaxy Z Fold 8, Pixel 10, and Galaxy S26 between June and August. Models with less than 12 GB of RAM or without support for Gemini Nano v3 will receive the "basic" Android 17 — that is, without the full on-device Gemini Intelligence package.

Gemini Intelligence: The Heart of Android 17

If there is one feature that defines the version, it is Gemini Intelligence. Google repositions Gemini as an intelligence layer embedded in the system, no longer an app you open. The AI sees your context (notifications, emails, calendar, open screens) and acts across multiple apps with a single command.

What Changes in Daily Life

The on-stage example sums it up: a parent asks in one sentence "buy the books listed in the teacher's email" — and Gemini opens Gmail, identifies the material, opens the shopping app, builds the cart, and returns confirmation to the user. It's not a chatbot responding; it's a series of real actions executed in sequence.

How It Runs Under the Hood

Android 17 separates execution into two layers:

On-device with Gemini Nano v3, for tasks involving personal data and requiring low latency.
Cloud via Private AI Compute, Google's confidential inference infrastructure, when the task requires large models — without Google engineers being able to read the request content.

This is the first time mainstream Android brings agentic AI as a system component, not as a separate app.

Security: How Android 17 Kills Banking Scams

Brazil is the model lab for this package, and you can feel it. Google partnered with Nubank and Itaú to activate an anti-scam block that detects fake calls — when the number identifies itself as a bank but is spoofed, the system automatically drops the call. Banking trojans like BrasDex and GoatRAT, which dominated 2024 and 2025, lose their main vector.

The SMS OTP Delay

The most surgical measure is the up to 3-hour delay in third-party app access to SMS containing OTP or WebOTP codes. The classic attack worked like this:

Victim installs a malicious app that requests SMS read permission.
Bank sends a confirmation code via SMS.
Trojan reads the code before the user, transfers the balance in seconds.

In Android 17, the default messaging app still receives the code instantly — the app the user uses to read SMS is exempt. But any other app will only see the code after 3 hours, when it has already expired. The scam window closes.

Local Network Restriction

The system also starts controlling access to the local network. Malicious apps abused this to map routers, IoT devices, and even attack internal home systems. In Android 17, you grant permission per app, as already happens with camera or microphone.

Privacy: What Changed in Defaults

More subtle, but equally important: Android 17 changed sensitive defaults. OS verification allows the user to confirm, in the settings themselves, that the running system is an official and widely distributed build — a defense against modified ROMs that pretend to be legitimate builds to steal credentials.

Precise location permission, previously granted with a single tap, now requires additional confirmation when the app also requests continuous background access. Photo access now suggests, by default, delivering specific photos instead of the entire library — aligned with what iOS already did.

These are not revolutions, but they broadly reduce the data collection surface without granular consent.

The second area where Android 17 delivers concrete gains is productivity.

Rambler: Dictation That Understands You

Rambler is a new Gboard layer that replaces traditional dictation. Instead of transcribing word-for-word, it identifies important speech fragments, discards fillers ("um", "like", "you know"), corrects itself when you reformulate mid-sentence, and supports language switching within the same sentence. For those who dictate long audios or work bilingually, it's night and day.

You describe in natural language the widget you want — "countdown to my son's birthday", "dollar exchange rate updated hourly", "next recipe from my food app" — and Gemini builds the widget on the spot, without needing a dedicated app. This is the first time Android delivers native on-demand UI generation.

Intelligent Autofill

Autofill has been rewritten on top of Gemini Intelligence. It doesn't just fill in name and card — it fills entire forms based on what it saw in recent emails, the calendar, and similar forms filled before. In public tests, it reduced sign-up time on e-commerce sites by over 70%.

Content Creators and Digital Well-being

The media division also stood out in the announcement.

Screen Reactions combines screen recording with front camera in real time, placing the user in a bubble over the displayed content. Tutorials, gameplay, and reaction videos on TikTok and YouTube Shorts become viable without third-party apps and without quality loss.

Pause Point is the countermeasure to feed-scrolling addiction: you mark apps as "distraction sources" and the system imposes a 10-second waiting screen before opening. It seems small, but Google's internal data shows that half of the openings are abandoned during the pause — the user regains awareness of what they were about to do and gives up.

Another new feature is Metric Style notifications: live notifications that display up to three simultaneous variables on the Always-On Display and status bar. Health, fitness, timer, and travel apps can now continuously show data without occupying the screen.

iOS → Android Migration: The Official Bridge with Apple

One of the least expected changes is the agreement with Apple to simplify data transfer. Android 17 allows wireless migration of:

Passwords (via Passkeys)
Photos and videos
Messages (including iMessage history converted to RCS)
Apps with equivalents on the Play Store
Contacts
eSIM, when the carrier supports it

In practice, this is the end of the main friction for those who wanted to switch from iPhone to Android but couldn't migrate conversation history. Cupertino entered this agreement because the European DMA mandates interoperability, but the effect benefits all global users.

Who Gets Android 17 First: Requirements and Models

Not every Android will become an "intelligence system." The full Gemini Intelligence requires:

Requirement	Minimum Recommended
RAM	12 GB
Processor	High-end with NPU compatible with Gemini Nano v3
Storage	256 GB
Battery	4,500 mAh (heavy on-device AI usage)

Devices that receive the full package first:

Galaxy Z Fold 8 (July 2026 — absolute debut)
Pixel 10 / Pixel 10 Pro
Galaxy S26
Vivo X300 Pro / iQOO 15 (tested in Beta 3)

Devices from the Pixel 7, 8, and 9 lines and Galaxy S22 to S25 receive Android 17 base with security, OTP delay, Pause Point, and Screen Reactions — but the agentic Gemini Intelligence is gradual and depends on RAM. Pixel 6 and below only get security patches.

What This Means for Brazilian Companies

Two immediate effects for those operating a business in Brazil:

Banking apps and payment gateways need to migrate fallback logic. Those still using SMS as a second factor (without an authenticator app) will see login conversion drop in apps that rely on automatic code reading by third-party SDKs. Update to Passkeys or an authenticator app.
Apps that rely on notifications need to review the Metric style. Delivery, fitness, financial monitoring, and shipping tracking apps can (and should) adopt Live Updates Metric Style to remain visible on the Always-On Display. Those who ignore it will be overlooked by competitors.

For those offering apps as a complement to education or customer service, Android 17 also changes the mobile playbook. I've already written about how a customized Moodle app outperforms the official app in engagement and branding — with Metric Style notifications, the custom app can show course progress live on the Always-On Display, something the official app will likely take time to deliver. Similarly, Moodle push notifications have become an engagement multiplier — on Android 17 they gain a new level of visibility.

Conclusion: Why Android 17 Is Different from Previous Versions

Android has always evolved in cycles of "quality and polish" interspersed with "major changes." Android 17 is clearly in the second group, and for a different reason than previous major versions: for the first time, Google has repositioned the product. It is no longer "the Android operating system," it is "the Android intelligence system." AI has become a primary function — not a plug-in, not an app, not a separate dock.

This changes the briefing for companies, developers, and users. Those who ignore Gemini integration will seem outdated in six months. Those who design products thinking about natural language automation — agents that perform tasks within your app, not just within Gemini — will ride the next wave of UX. And for those who only use their phone for messaging, photos, and banking, the most important gain is the security package: for the first time, the operating system attacks the root of banking scams in Brazil, not just paints a warning layer on the screen.

The stable version launches in June. It's worth the wait.