2

I have a Moto G, and I am very careful in protecting my data. I currently use CM Security App from the Google Play Store and it's very helpful in taking a photo to a person who tried unlocking my phone twice without success. Also I have locked my settings to avoid people from turning off my internet and GPS; in that way I will still able to track my phone via GPS. My phone is also locked to avoid people from uninstalling apps without my password. Additional, I had also disable USB debugging to stop someone from wiping my phone directly from a computer, but all this efforts will come down if the hard reset is enabled.

Is there any way to put a password to my boot settings to stop someone from making a hard reset to my phone? I already investigated, and encrypting my phone will not work for this.

2

No. Even if you could add such a restriction within Android, it would still be possible for an attacker to boot into recovery or into fastboot mode and reset the phone from there.


If you're trying to protect the confidentiality of your data (i.e. stop an attacker accessing it), then encrypting the phone is what's required for that. If you're trying to protect the integrity of your data (i.e. stop an attacker deleting it), then you can do that by backing it up to a secure location that there's no risk of losing.

If you're trying to stop someone deleting a tracking program or the like, then you're not protecting your data at all, you're trying to protect the phone itself. You can only do this with physical precautions, not software precautions, or by insuring against the loss.

  • I guess his goal is akin to self-destruct. :) If you could do what he wants then you could prevent a thief from getting any use out of your stolen phone. Don't think it can be done though. – curious_cat Dec 11 '14 at 14:46
1

Direct from TWRP website, copied word for word. I am posting this for reference and nothing else.


Password protecting TWRP (lockscreen)

've had people ask enough for a protected TWRP that I'm creating this page as a response so I don't have to retype. If you're seeing this page, you're probably asking, "Why doesn't TWRP offer password protection?" You want to lock down your device so that a would-be theif won't be able to wipe your device to get past your lockscreen and/or so they can't wipe away that cool app you bought from the Play Store that will let you track your stolen device via GPS. Well, here's the short answer:

Nothing trumps physical access to your device. If you've lost it, there's no way that TWRP can secure it.

For a longer answer, it's very easy for anyone with just a little bit of knowledge to get around any kind of security that TWRP might have. All they have to do is flash one of the other recoveries that's available that doesn't have password protection to get around it. Most, if not all devices have ways to flash recovery without needing to boot to either Android or recovery (usually via fastboot or download mode / Odin). Quite literally the only way to truly secure your device would be to render the USB port completely unusable which isn't an option for most newer devices that don't have removable batteries. Even then most devices could still be worked with via jtag though it's unlikely that a thief will go to the trouble of paying for a jtag service on a device that has a broken USB port. (Note: I am not recommending that you purposely damage your USB port as it will also likely make it very difficult to recover your device if anything ever goes wrong!)

I also don't want to offer a lockscreen / password protection because it offers such a superficial level of protection. Users rarely read and would skip over any disclaimers that we have that indicate that any protection that we displayed indicating that their device really isn't secure. If your device has fallen into someone else's hands, your best case scenario should be that you hope that they don't get your personal data. If you don't want someone getting your personal data, use Android's device encryption and a good lockscreen.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.