Would like to ask if it is possible to decrypt the user private key store found in android keystore.

I know that you need the masterkey to decrypt it. But is it possible to obtain the masterkey from a rooted android device?


1 Answer 1


The Android Keystore (in code named AndroidKeyStore) uses on recent Google Android Devices the hardware based security of the ARM CPUs named Trusted Execution Environment (TEE).

Therefore the private keys are protected in a way that allows Android apps to use them (e.g. decrypt something using that private key) but you can't extract those keys, as the hardware compartment the code is executed in, has no export function.

Therefore even on rooted devices you can not get export or "decrypt" private and also symmetric keys that are stored in the Android Keystore. This means that apps using that keystore are bound to the device and you can't fully backup app data of such apps as the Android Keystore protected keys will always be missing.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .