A method and a terminal for enhancing information security, where the method includes receiving, by a terminal, an open instruction of a sensitive application, starting a security policy of the sensitive application, displaying prompt information that a notification message arrives when the notification message related to the sensitive application is received, and displaying a prompt for entering a password when an instruction for opening the notification message is received. Hence, a preset security policy is automatically started when the sensitive application is used. When the notification message related to the sensitive application is received, a corresponding password needs to be entered. This enhances information security, facilitates use by a user, and improves user experience.