Edit

Share via


User experiences in Microsoft Defender for Endpoint on Android

As part of our ongoing commitment to deliver exceptional user experiences, we're excited to announce a series of upcoming changes to the user interface and overall experience of our Microsoft Defender for Endpoint mobile app.

The new enhancements are designed to improve usability, streamline navigation, and ensure our app meets the evolving needs of our users.

Key changes - November 2025

In this release, we've made it easier for users to share feedback, including logs, to the Microsoft Defender team. The changes include:

Bottom pane experience

When users select Help and Feedback in the left navigation pane (Screen 1, accessible by tapping the profile picture), a new bottom feedback pane opens (Screen 2). This pane has been updated to improve readability and make it easier for users to share feedback.

The Send feedback option in the updated bottom pane enables users to share positive or negative feedback, along with Microsoft Defender and authenticator logs, which will be accessible to the Microsoft Defender team. When a user selects Send feedback, they are redirected to a new screen (Screen 3) where they can include logs along with their feedback submission.

Screenshots showing how to send feedback and logs from the Microsoft Defender mobile app options menu.

One-click Send Logs experience

A new Send logs to Microsoft option has been added directly to the left navigation pane. This enables users to quickly send logs to Microsoft. It redirects them to the logs submission page (Screen 2). This option is particularly useful when a support case has been created and a support engineer is assigned, providing a convenient way for users to submit logs. Because this option doesn't allow users to include written feedback, the Defender team will not have access to the logs unless an incident ID is explicitly shared via mail or support request. This option collects logs from both the Defender and Authenticator apps.

Screenshots showing how to send logs directly to Microsoft from the Microsoft Defender mobile app options menu.

Key changes - September 2025

We're pleased to introduce the new Onboarding screens that come up when the user starts onboarding after sign-in.

The primary changes are as follows:

EULA screen revamp

Screenshot showing EULA screen after redesign in light mode.

Permission consolidation screen changes

Permission consolidation screen after redesign in light mode.

New bottom sheet for permission information

Permissions information bottom sheet.

Optional VPN consent screen in light mode.

Intermediate screens that come up during the permission flow

These are the following screens that have been shifted from old Enterprise screen to new look and feel screens similar to the consumer screens.

NP consent screen in light mode.

Discover vulnerable apps consent screen in light mode.

Key changes - March 2025

We're pleased to introduce the Device Protection feature card for our enterprise users which includes App Security, Web Protection, Security History features are designed to be more user-friendly and accessible.

The updated feature cards also include recommendation cards, which prominently display any active alerts, ensuring you stay informed. Features are now displayed as tiles on L2 screens to improve user experience and navigation efficiency.

The primary changes are as follows:

Main dashboard changes

The following image shows the main Dashboard screen that appears to the enterprise's users as per our latest rollout of enhancements to the application. The following image illustrates the previous and new version of the main dashboard.

Screensot showing the Microsoft Defender for Endpoint Mobile Dashboard on Android devices before the new update.

List the features inside one Feature Card

The App Security and Web Protection features are now consolidated under a single feature card titled Device Protection. Previously, each functionality had its own separate card on the Dashboard screen. The following image displays the new version of the Device Protection feature card.

Screensot showing the Microsoft Defender for Endpoint Feature Card before the new updates.

Detailed feature experience

We updated all the subordinating screens associated with the feature

  1. Web Protection:

    Screensot showing the web protection feature on the MDE Android app.

  2. App Security and App Scanning:

    Screensot showing the app security feature on the MDE Android app.

  3. Threat found:

    The following image highlights the 'Threat Found' feature, showcasing its functionality both before and after the recent update.

    Screensot showing the threat found feature on the MDE Android app.

  4. Uninstall threat:

    Screensot showing the new uninstall threat feature on the MDE Android app.

  5. Security History:

    Screensot showing the uninstall threat feature on the MDE Android app.

Alerts

We added a new section to show multiple alerts together on dashboard.

Screensot showing the new updates to the alerts feature on the MDE Android app.