How can I setup Full Disk Encryption in Android 10?
According to the ASOP documentation, it is no longer possible to use FDE and the user is forced to use File-Based Encryption
Note: Devices running Android 7.0–9 support full-disk encryption. New devices running Android 10 and higher must use file-based encryption.
Though I understand the argument for convenience (morning alarms, updates, etc), there are several strong use-cases where it's better to have a FDE with a very long passphrase -- consider journalists, activists, political prisoners, etc crossing borders with oppressive governments. It's better to just turn the device off and rely on FDE to protect absolutely everything in these situations.
So the question is: how do at-risk folks use FDE in Android 10?
Note: creative answers that involve root, custom ROMS, apps, etc are welcome. I'm asking how this can be done on an Android 10 device. I'm not asking if Google "permits" it to be done.
forceencrypt=
flag in /vendor/etc/fstab.qcom this is one of the devices one should keep bootloader locked for security reasons (or downgrade MIUI 11)