According to the ASOP documentation, it is no longer possible to use FDE and the user is forced to use File-Based Encryption

Note: Devices running Android 7.0–9 support full-disk encryption. New devices running Android 10 and higher must use file-based encryption.

Though I understand the argument for convenience (morning alarms, updates, etc), there are several strong use-cases where it's better to have a FDE with a very long passphrase -- consider journalists, activists, political prisoners, etc crossing borders with oppressive governments. It's better to just turn the device off and rely on FDE to protect absolutely everything in these situations.

I see that GraphoneOS's FAQ page talks about FDE and also Android 10, but doesn't directly answer this question.

Do the GraphoneOS releases that are based on Android 10 still use FDE? If so, how?

  • See also android.stackexchange.com/questions/239114/… Commented Jul 3, 2021 at 11:46
  • lot Android 10 devices still running FDE, the quoted google statement is irrelevant. which encryption type is used depends on device, not OS
    – alecxs
    Commented Jul 4, 2021 at 17:25
  • @alecxs can you name one device that runs Android 10 and uses FDE? Commented Jul 4, 2021 at 18:20
  • Mi5, Poco F1, Galaxy S9+ (and lot more)
    – alecxs
    Commented Jul 4, 2021 at 18:34
  • They don't run Android 10+ Commented Jul 4, 2021 at 19:31


You must log in to answer this question.