0

This post here: https://android.stackexchange.com/a/218963/364009

outlines the snapshots location for the app switcher when an app is sent to the background, /data/system_ce/userid/snapshots, or at least something similar for File Based Encryption Android phones running 9.0 pie and below.

Are these snapshots also encrypted in Full Disk encryption?

For Android 9 supporting File Based Encryption and up, (Android 10, 11, etc.), are these snapshots encrypted? If not, can they be recovered after a factory reset with special software?

See post here: https://android.stackexchange.com/a/198080/364009

mentioning exceptions to directories that are not encrypted, like /system_ce, because their subdirectories are encrypted. Does this mean these snapshots are encrypted if /userid is also encrypted or /userid/snapshots is encrypted?

Thank you!

Edited for clarity of Android versions of interest and typo.

Improve this question
3
  • Even files that are only encrypted with the device encryption key (thus they are not bound to the user secret) can not be recovered after a factory reset as al keys are erased on a factory reset.
    – Robert
    Mar 9 at 8:07
  • Correct, but with file based encryption, aren't specific files now tied to their own key? So I wanted to make sure that these task switching snapshots specifically were encrypted, is that the case? I believe they were with full disk encryption.
    – AndroidUser558
    Mar 9 at 13:28
  • Q1. FDE what do you expect remain unencrypted on full-disk encryption Q2. FBE "ce" = "credential encrypted" Q3. what is the difference
    – alecxs
    Mar 12 at 12:41

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .