Android 17 Beta 2: Floating Windows, EyeDropper API, and OTP Security

Key points:
  • Multi-window Interface: Bubble mode allows you to run any application in resizable floating windows.
  • Screen and Data Privacy: New EyeDropper API and system contact selector to prevent invasive permissions for capturing and reading address books.
  • SMS Security: Three-hour delay in accessing SMS messages with OTP codes for third-party applications, preventing credential hijacking.
  • Local Area Network and UWB: ACCESS_LOCAL_NETWORK permission to prevent covert LAN scans and support for indoor browsing via UWB DL-TDOA.
  • Continuity of Tasks: The Handoff API synchronizes the state of applications between nearby devices to resume work.

Android 17 Beta 2

Google has released the second beta version of Android 17, continuing the development of its mobile platform with a view to a final launch scheduled for the second quarter of 2026. This update, dAvailable for testing from the Pixel 6 series up to the upcoming Pixel 10 line, In addition to the Fold and Tablet models, it introduces direct modifications to multitasking management, access to sensitive data by applications, and communication between nearby physical devices.

Regarding the release of this update, the developers mention that beta 2 offers several new features, such as the EyeDropper API and a privacy-protecting contact picker, as well as advanced ranges, cross-device transfer APIs, and much more.

Android 17 beta 1
Related article:
Android 17 Beta 1: VVC support, generational harvester, and Canary channel

Windowed multitasking and peripheral control

The second beta of Android 17 introduces improvements in user interface management, with the Introduction of the multi-window mode called "Bubbles". Unlike the previous messaging API, this feature It allows any application to run in a floating window. The user activates this mode by pressing and holding the application icon in the launcher. On devices with large screens, such as tablets, the operating system creates a separate area in the taskbar to organize these floating windows, allowing them to be grouped, moved, and docked to specific areas of the screen.

The handling of input peripherals has also been standardized. The system now processes touchpad events. (touchpads) in the same way as the movements of a traditional mouse. Scrolling gestures and pointer movement are translated to relative coordinates by default, which resolves compatibility issues in first-person games that capture the pointer. If a developer needs access to the exact location data of fingers on the panel, they must explicitly request absolute coordinate capture mode.

System-mediated privacy

Android 17 Beta 2 delegates the collection of certain data to managed interfaces directly through the operating system, reducing the permissions that applications can request. A clear example is the new EyeDropper API. This tool allows a user to select the color of any pixel on the screen using a system eyedropper. The application receives only the value of the selected color, eliminating the need to grant it screenshot permissions, which prevents the software from covertly analyzing the entire panel's contents.

El Access to the address book follows the same logic, The system now features a new contact picker invoked via the ACTION_PICK_CONTACTS action. Instead of requesting the global READ_CONTACTS permission, which exposes the entire address book, the application delegates the selection to a native interface. The user decides exactly which contact and which specific fields. (such as just an email address or a phone number) you want to share with the application in that particular session.

OTP protection and local network access

The security of local and cellular communications has stricter restrictions. To mitigate password theft single use only (OTP) messages sent via SMS, Android 17 artificially delays third-party access to these messagesAny application with SMS read permissions that is not the verified recipient of the message will have to wait three hours before the system allows it to read the content. This applies to both standard and WebOTP messages, with the exception of the system's default messaging application.

In the area of ​​connectivity in the home or office, The ACCESS_LOCAL_NETWORK permission is entered. Previously, the Applications could scan the local area network (LAN) without restrictions to identify connected devices. Now, the applications geared towards Android 17 They must request this explicit permission to detect and connect to equipment such as smart TVs or speakers. This blocks user profiling tactics based on covert analysis of the devices that make up the home network.

Continuity of tasks and specialized hardware

With the new Handoff API, now allows synchronizing the exact state of an application between nearby devicesallowing a user to start a task on their phone and continue it on their tablet. The system displays a transfer suggestion on the receiving device. It can redirect the user to a web version if the native app isn't installed. Distance measurement is also expanded with support for UWB DL-TDOA, which facilitates privacy-respecting indoor navigation, and a new WiFi Alliance-certified proximity detection feature.

Finally, Access to artificial intelligence hardware requires new declarationsApplications that need to run processes directly on the Neural Processing Unit (NPU), including those using the LiteRT delegate or vendor SDKs, are required to declare the FEATURE_NEURAL_PROCESSING_UNIT requirement in their manifest. Otherwise, the operating system will block their access to this hardware component.

At the network level, developers now have methods to query the maximum bandwidth allocated by the telephone operator (both upload and download), allowing media streaming applications to precisely adjust their video quality before starting playback.

Finally, if you are interested in learning more about it, you can consult the details in the following link.