A secret hidden browser in Android allows bypassing parental controls

Android includes a secret hidden option to launch a web browser that allows opening any URL. It doesn't follow the restrictions applied to the device, e.g. parental controls, so you can go literally anywhere with it.

It has been found by user Matan-h that Google has a hidden browser that can be accessed through the "Manage my account" menu present in various Android applications, including Settings.

To access this browser, follow these steps.

Open the hidden browser on Android

1. Open "Settings" and select "Google" or any application that allows you to choose your account.
2. Click on "Manage my account" and open the Security tab.
3. Scroll down and select "Password Manager", then click on "Settings" in the upper right corner.
4. Scroll down and select "Set up device encryption" and click on "Learn more about device encryption".
5. You will now be in the browser. To go to Google.com, click on the hamburger menu and select "Privacy Policy".
6. Click on the nine dots at the top and wait for 5 seconds before selecting "Search". If you can't find the search icon, scroll down to "Google" and click on it.
7. Sign out of your Google account.
8. The secret browser is now accessible and can be used for any web site, including playing YouTube videos through the Settings app.

The browser is private and automatically logs you out of all Google accounts at the end of the session. However, it has some disadvantages such as the back key always taking you back to password management settings and the lack of an address bar.

Additionally, there are potentially dangerous features such as a strange JavaScript object named mm.

It is recommended to exercise caution when using this hidden browser. One of its functions can be used set local encryption keys . Thus, a malicious site could hypothetically place its keys there.

Source