2

My doubts are,

  1. Would an android device shipped with Lollipop 5.0 get encrypted itself upon first boot? I saw a lot of blogs saying Lolipop does not come with default encryption but in the official link it says that devices get encrypted by default upon first boot — too many confusing blog articles. What is the difference between default encryption and encryption on first boot?

  2. Most blogs say we have to manually encrypt the Device but I don't understand — if it's already encrypted upon first boot, then why encrypt again manually? What is the advantage?

Improve this question
6
  • 1
    As far as I remember Google had introduced automatic encryption with Android 5 and applied it in the Nexus phones. But nearly no other manufacturer had taken over the encryption feature at that time. Therefore most likely your phone is not encrypted. You can check that in Android settings -> Security if encryption is enabled. If it is enabled you should also see on every reboot the pre-boot password entering dialog asking for the device password.
    – Robert
    May 22, 2022 at 20:17
  • @Robert official documentation says " Upon first boot, the device creates a randomly generated 128-bit master key and then hashes it with a default password and stored salt. The default password is: "default_password" However, the resultant hash is also signed through a TEE (such as TrustZone), which uses a hash of the signature to encrypt the master key."
    – munna ss
    May 22, 2022 at 20:32
  • 1
    The documentation may state that but only if that feature is mandatory for Google Android all phones had it implementad. For example a CPU with TEE was AFAIK not a requirement at that time so most manufactures were using a CPU without. That contradicts your documentation - what now?
    – Robert
    May 22, 2022 at 21:13
  • @Robert thanks man.Understood
    – munna ss
    May 22, 2022 at 23:12
  • Samsung Galaxy Tab A 9.7 LTE SM-T555 (shipped with Android 5) latest stock ROM (Android 7) still unencrypted (I own) - it really depends on how accurate OEMs maintain it. 1. What is the difference between default encryption and encryption on first boot? - nothing. 2. why encrypt again manually? - secure start-up
    – alecxs
    May 23, 2022 at 18:29

0

Reset to default

You must log in to answer this question.