A permission is a device setting that decides what an app or service may access, such as the microphone, camera, contacts, location, notifications, files, or accessibility features. Mobile systems usually ask for permission before granting access, and users can often allow, deny, or limit it.
Permissions matter in cyber security because they define what damage a trusted app can do if it is malicious, compromised, or simply over-privileged. Attackers often try to get broad permissions so they can spy on users, read data, send messages, or control device features. Defenders reduce risk by following least privilege: grant only the access an app truly needs, review permissions regularly, and revoke anything unused or suspicious. On phones, changes to default assistants or other core services can also change which permissions are active and what the system can do on the user’s behalf.