27

over a simple password screen lock: nobody can take the internal memory of my phone out of the phone itself. So what is the advantage of 1. over a simple screen lock with password + SIM code lock? Understand that encryption is used to protect the data from unauthorized access (device misplaced or lost or alike situations). If you are sure that the device ...


26

nobody can take the internal memory of my phone out of the phone itself While taking out your phone's internal storage out is harder than the SD card, it's definitely not impossible. Rework stations used to extract chips from circuit boards may be expensive, but not outrageously so (around $1000), and can be rented in many electronic repair shops for tens ...


14

There are three ways to identify which encryption type is used: Identification by device behavior As a user you should be able to identify what encryption scheme is used by the behavior of your device when it boots (e.g. because you restarted it). If the classic Full Disk Encryption is active your device will boot for some time and then present a special ...


13

Marshmallow has two ways to treat the external SD card : Portable Storage : In this the entire memory of the ext.SD card is available for use, if it is not encrypted (natively) and you can mount it on your PC to read/ transfer contents Adoptable-storage: In this the ext. SD is treated as a part of the phone and when you encrypt the phone, the ext. SD card ...


12

On my encrypted Nexus S I use a temporary tmpfs mount on /sdcard in CWM. It has enough RAM to hold the new ROM in memory during the update: Download your ROM to /tmp/update.zip and boot into recovery. Then log in via 'adb shell': ## on the host machine do: me@workstation:/tmp$ adb shell ## now on the device in 'adb shell' mode... ~ # mount -t tmpfs none /...


12

The answer for me involved a number of things, but I think one is really the key. Use the "recovery" Command, bro This uses CyanogenMod's/AOSP's recovery program to wipe the user data and disable encryption. (found in this answer on Stack Overflow) Boot into your recovery, and then from your computer run adb shell recovery --wipe_data --...


11

Your encryption password is the same as the pattern/PIN/password you use to lock your screen. So simply go to Settings > Security > Screen lock and change it. Note that when you do this Android will ask you whether to also enter the pattern/PIN/password when you start the device in order to make your encrypted device's data unreadable without it. In Android ...


10

I can confirm with 100% certainty that the numbers are indeed 1-9 for the pattern unlock. My Nexus 4 met the same unfortunate end (except on concrete) and after some Googling, I found this post and was able to follow personne3000's answer in order to mount my pattern-encrypted userdata partition. I'm running Ubuntu 15.04 x64 and had to apt-get install ...


10

Google has no idea what the encryption key for your device is. The entire process takes place on your device and the key is never transmitted anywhere. The key itself is also not stored in plaintext on your device: Storing the encrypted key The encrypted key is stored in the crypto metadata. Hardware backing is implemented by using Trusted Execution ...


10

Interesting question, let's just try it out in a practical test. I connected to my device (running Android 5.1.1 Lollipop) through ADB over Wi-Fi using adb connect 10.0.0.10 and ran some tests. What you are seeing is the output of the packets that I captured using Wireshark. Starting a shell in ADB by sending adb shell: 2290 127.822126 192.168.0.41 ...


9

On Oreo 8.0.0 Settings → Security & Location → Encryption & Credentials & it shows phone encrypted Better method Using adb command adb shell getprop ro.crypto.state ( works on unrooted devices also) returns encrypted or unencrypted Output examples Oreo ( Unrooted, encrypted) Vostro1510 ~ $ adb shell getprop ro.crypto.state encrypted ...


9

On my Moto G 3rd Gen (osprey), neither calling recovery nor wiping LUKS header (at start and end of partition) worked - I still needed to enter the encryption password during Cyanogen Mod bootup, then was stuck with an "encryption error" message. I finally found that my TWRP 3.0.1 recovery has a "Format Data" option in the "Wipe" section. This does a ...


9

Even it does not fully answer the question, here's a guide to decrypt the external storage formatted as internal. You do need to be root on your phone, however. The gist is that we search for strings including the keyword expand and ending with .key within vold using: $ strings vold|grep -i expand --change-name=0:android_expand %s/expand_%s.key /mnt/expand/...


8

There are many available choices, depending on the features you need: Cryptonite uses EncFS and requires root LUKS also requires root and provides on-the-fly encryption (AES by default) to virtual folders Eds provides encrypted containers and does not require root. It even is compatible to TrueCrypt. DroidCrypt can encrypt single files or full directories. ...


8

I'm using Samsung Galaxy Note Android 4.0.3. and I've tried Encrypting and Decrypting several times successfully.


8

Yes, 3G traffic will go through your VPN if it's set up correctly. Whether or not your service provider supports that is another matter; some block VPN traffic (such as Verizon - see this thread).


8

Same place where you start the encryption: In (I am on 4.3) Settings -> Options -> Security, the first entry will report the status and offer decrypt (if encrypted) or encrypt (if not).


7

Master reset with hardware keys Turn Off the Device Press and Hold the Volume Up, Home, and Power Button When the phone vibrates release the Power Button, but continue to hold the other two When you see the system recovery screen release the other two buttons Using the Volume down, select "Wipe data / Factory reset" Press Power Button to select it When the ...


7

Apparently there is no tool on PC to decrypt Android's encryption at the moment, but the TWRP recovery can be used on the device to decrypt everything... Even with a broken touchscreen, as long as your device is supported by TWRP recovery: Download the TWRP image (2.8.7 worked for me) Boot into fastboot (power + vol. down on Nexus 4) Start the recovery, ...


7

Thanks to Samsung non standard implementation, OP couldn't factory-reset and encrypt before selling. They couldn't : Check if the device was encrypted Locate the option for encryption Steps advised : Install minimal adb on your laptop (Is there a minimal installation of ADB?) and check device encryption status (Is there a way for a user to tell if their ...


6

Goggle Drive gives you some security options regarding your documents: You can choose to encrypt all offline documents (that is, documents stored on your device); And can also choose to decrypt documents incrementally as they are streamed to your phone, by selecting the Streaming Decryption, thus having just a small portion of the document decrypted when ...


6

Summary The encryption of the SD card is a device-specific subject, but as far as Android goes, only /data gets encrypted. Android default behaviour: By "default", for Android, the encryption on the device is applied to /data only. This because all installed applications that get moved to the SD card are already encrypted and only usable at that ...


6

Android provides the capability to do filesystem encryption, but it's up to the vendor who builds the firmware for your device to enable it for the SD card. I have only seen a few devices with this capability enabled for the SD card, though most seem to have it for the internal storage (/data). Typically if it's enabled, there will be a menu item in the ...


6

The FAQ of Titanium Backup about crypthography states that you just need the passphrase to recover any backup. That must mean that the private key file is stored along with all of your backups, because it could never work in any other ways. The big problem with that FAQ is that it should states this explicitly IMHO so to make things clearer for us users. I ...


6

I have the same problem when sending encrypted mails from my Apple Mail client with GPGMail2 plug-in. Apparently K9-Mail supports only PGP/Inline and not PGP/MIME which seems to be the standard formatting PGP-Emails today. If you like to test it on your own, configure GPGMail to use inline mode through your Terminal: defaults write org.gpgtools.gpgmail ...


6

There are low(er)-level commands that can be used in a shell to encrypt your user data partition. Disclaimer/Warning: the following instructions will wipe your data, ensure that you make a backup if needed. Following these steps, you should be able to wipe your data partition and have it encrypted afterwards (similar to a factory reset): Boot your phone ...


6

There's some interesting pointer found in Decrypting Android M adopted storage (emphasis mine): Android M allows for adoptable storage, which is implemented similarly to internal storage FDE -- using dm-crypt with a per-volume, static 128-bit AES key, stored in /data/misc/vold/. Once the key is extracted from the device, adopted storage can be mounted and ...


5

As described in this how-to, you can do this by installing a "chrooted" Linux distro on Android such as Ubuntu, and then downloading, installing and configuring Hamachi manually. Hamachi is a vpn program which can be used to link up computers. With hamachi on an android you would be able to access the files on multiple computers from anywhere in the ...


5

I have found a working solution on GitHub: https://github.com/phyber/TiBUdecrypter 1. Install/upgrade dependencies (on Ubuntu) apt-get install python2.7 pip install --upgrade docopt pip install --upgrade six pip install --upgrade PyCrypto 2. Get script from GitHub Download: https://github.com/phyber/TiBUdecrypter/archive/master.zip Extract the ZIP 3. ...


5

Encryption is done on the /data partition (where all app-data is stored). However, /sdcard is sometimes encrypted too (if the sdcard is actually internal memory of the phone i.e. not removable). If the sdcard is also encrypted,then you will be unable to flash ROM's from within Recovery (recovery can't read encrypted sdcard).


Only top voted, non community-wiki answers of a minimum length are eligible