8

There is a semi-relevant thread on SO https://stackoverflow.com/questions/12640708/check-if-android-filesystem-is-encrypted that explains how a developer would determine if full-disk encryption is enabled, but is there an easy way for a user to know? I tried encrypting (I'm on 4.4.2) and it seemed to fail at some point but did not throw an error, just dropped me back to the homescreen at a certain point.

| improve this question | |
  • I haven't tried to encrypted my phone, but from other relevant questions, especially "How do I turn-off lockscreen on encrypted phone?", the answer is to check if you can turn-off/disable the lockscreen, since AFAIK, you need PIN/credential for encryption. (Might be moot if the user also installed user-certificate though) – Andrew T.♦ Jan 17 '15 at 21:28
  • 1
    That's not conclusive (as you said), you can set a PIN without encryption – warsong Jan 17 '15 at 21:57
  • I have a Galaxy S6 that I attempted to encrypt, I started the process and took a shower. When I came back to check the results I could not tell if it was successful. The only difference is that there is no longer a choice to encrypt. That does not conclusively indicate that the phone is encrypted. – xjohndoe001x Doex Aug 27 '16 at 7:27
9
+50

On Oreo 8.0.0

Settings → Security & Location → Encryption & Credentials & it shows phone encrypted

Better method

Using command adb shell getprop ro.crypto.state ( works on unrooted devices also) returns encrypted or unencrypted

Output examples

  • Oreo ( Unrooted, encrypted)

Vostro1510 ~ $ adb shell getprop ro.crypto.state

encrypted

  • Marshmallow ( Rooted, unencrypted)

Vostro1510 ~ $ adb shell getprop ro.crypto.state

unencrypted

Source - Adb command to check if the device is encrypted

Note : Original question refers to Full Disk Encryption which has been replaced by File encryption from Nougat onwards. See this for details

Edit Instead of adb you can install Termux and type getprop ro.crypto.state to get the result - works on unrooted device also

| improve this answer | |
  • 1
    +1. Is there a way to know if the device uses full-disk encryption or file based encryption? – Firelord♦ Mar 1 '19 at 15:07
  • @Firelord Thanks. Yes, we have an answer here android.stackexchange.com/q/195713 – beeshyams Mar 1 '19 at 15:55
  • You call it "Better method". Unfortunately I don't know how many people have adb installed or not. I guess (but don't) know that most devices don't have adb. – guettli Jan 9 at 13:03
  • 1
    @guettli guess you missed the app alternative towards the end of the answer – beeshyams Jan 10 at 16:32
8

Same place where you start the encryption:

In (I am on 4.3) Settings -> Options -> Security, the first entry will report the status and offer decrypt (if encrypted) or encrypt (if not).

| improve this answer | |
  • I could be wrong but isn't there a difference between FDE and system encryption? I think the one you mention is only system level. – warsong Aug 27 '16 at 12:07
1

The best way to tell if your Android device is encrypted (and the encryption is actually in use) is to reboot it and see if it asks for a password/PIN with a prompt on a black screen that says:

To start Android, enter your PIN

If you're not seeing this prompt, then even though your device may be encrypted, the encryption is pretty much useless. This is because Android's encryption works in two steps:

  • your files* get encrypted with a 128-bit master key
  • the master key is either encrypted with your password or just stored as is

The lack of prompt means the master key is not encrypted (or your device is not encrypted at all) and your data could be read by anyone who manages to boot a recovery image on your device such as TWRP.

To enable the encryption (enabled by default on devices shipped with 5.0+) go to Settings > Security & location > Encryption & credentials > Encrypt phone.

But to actually have the master key encrypted and your files inaccessible without a password, you need to go to Settings > Security & location > Screen lock > PIN or Password and tap Yes when it asks if you want to use Secure start-up.

This is how settings look like on Oreo, other versions may be different, but the settings you're looking for should be pretty much the same.

*7.0+ encrypts files, Android 5.0 - 6.x encrypts partitions (source)

| improve this answer | |
0

Try changeing default storage to SD Card

Settings -> Memory -> Default Location -> SD Card

if your phone is encrypted than you'll get a warning stating that internal memory is encrypted. Of course its only a hint, not a proof.

My P9 Lite (Android 7) behaves like that, and this is consistent with user guide page 193

Full-disk encryption | All data on the memory chipset is automatically encrypted

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.