1

I have a galaxy S8 using "default password" meaning no startup password or secure start up. The device is still encrypted by default so all data should not be recoverable after a factory reset as the old encryption key is deleted and a new one is generated on reboot. This is to my limited understanding. Is this right?

Now what about data that was "deleted" before the factory reset like photos or unwanted files that were "deleted" and then the device was reset? Is any of that info recoverable?

3
  • 2
    why should deleted file easier to recover than (unrecoverable) existing file? encrypted is encrypted no matter what kind of file it was
    – alecxs
    Commented Jun 2, 2022 at 22:27
  • So deleted files are still encrypted and unrecoverable after a factory reset? Also, do I have the first part right about default encryption despite no password?
    – Question
    Commented Jun 2, 2022 at 22:35
  • 1
    yes. the whole partition is encrypted, there is nothing left. not even a file system. the passphrase is "default_password" so there actually is a password. read more about FDE key derivation here
    – alecxs
    Commented Jun 3, 2022 at 3:15

0

You must log in to answer this question.

Browse other questions tagged .