Assuming that I have full access (root if neccesary) to a device running vanilla Android 8.1, how can I know if it is using Full Disk Encryption or File Based Encryption?


2 Answers 2


There are three ways to identify which encryption type is used:

Identification by device behavior

As a user you should be able to identify what encryption scheme is used by the behavior of your device when it boots (e.g. because you restarted it).

If the classic Full Disk Encryption is active your device will boot for some time and then present a special password enter dialog. If you enter the correct password and confirm it the device will continue to boot which will take some seconds. Then after some time Android will be started and ask again for your password or PIN using the common dialog you should already know when you unlock your device.

If you don't get such a password request in the middle of the boot process you have most likely File Based Encryption (or no encryption at all).

Read property via Termux

The terminal app Termux provides a command-line you can use for identifying which encryption mode your device uses.

Start Termux and enter the following command: getprop ro.crypto.type

If the output is file your device uses File Based Encryption and block if it uses Full Disk Encryption.

Read property via Android Debug Bridge (ADB)

If you have activated the development and ADB mode on your device you can connect it to your PC via USB and use the following command on your PC:

adb shell getprop ro.crypto.type

If it returns file your device uses File Based Encryption and block if it uses Full Disk Encryption.


For Samsung devices specifically, according to Samsung Knox Documentation - File-based encryption (FBE) and full-disk encryption (FDE),


FDE — Samsung Galaxy devices shipped with an Android version lower than 9.0 and Knox version lower than 3.3

FBE — Samsung Galaxy devices shipping with Android 9.0 or higher, with Knox 3.3 or higher

How do I check if my device uses FDE or FBE?

To check if your device uses FDE or FBE:

  1. On your device, navigate to Settings > Biometrics and security.
  2. In the Biometrics and security menu, check if the Secure startup menu exists or not.
    • If Secure startup is available, your device uses FDE.
    • If Secure startup is unavailable, your device uses FBE.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .