What are the security implications of enabling NFC on my Andriod device? My first NFC-capable Android device (running Lollipop) is on its way. I've been doing some research, and got some info on how NFC events are handled internally, but I'd like some more practical information on how careful I need to be when I have NFC enabled. For example:


I've read that the NFC is only on while the screen is on. Is this universally true?
If I just want to set up some custom tags to control settings on my device (around the house, work, car), is there a way to whitelist the tags I want to trust, and reject or require manual confirmation of any other tags? (I'm guessing if this functionality exists it would require a third party app?)
Is it possible for a malicious device somewhere masquerading as, for example, a simple URL tag to use Android Beam or similar functionality to skim information off my device without my knowledge?
It sounds like you're overthinking the capabilities of NFC. Most devices are configured so that the phone must be unlocked in order for an NFC to be triggered (this can be overridden with an app). Unless you place you phone on a tag with the screen on and unlocked, the tag won't be read.