Skip to main content
The 2024 Developer Survey results are live! See the results
28 votes

Why encrypt the device?

over a simple password screen lock: nobody can take the internal memory of my phone out of the phone itself. So what is the advantage of 1. over a simple screen lock with password + SIM code lock? ...
Firelord's user avatar
  • 25.2k
26 votes

Why encrypt the device?

nobody can take the internal memory of my phone out of the phone itself While taking out your phone's internal storage out is harder than the SD card, it's definitely not impossible. Rework stations ...
Dmitry Grigoryev's user avatar
22 votes
Accepted

How can I find out if my device uses FBE or FDE?

There are three ways to identify which encryption type is used: Identification by device behavior As a user you should be able to identify what encryption scheme is used by the behavior of your ...
Robert's user avatar
  • 21k
14 votes
Accepted

Is it possible to mount on a PC an SD card that has been encrypted by an Android Marshmallow device?

Marshmallow has two ways to treat the external SD card : Portable Storage : In this the entire memory of the ext.SD card is available for use, if it is not encrypted (natively) and you can mount it ...
beeshyams's user avatar
  • 41.1k
13 votes

Is there a way for a user to tell if their Android device is encrypted or not?

On Oreo 8.0.0 Settings → Security & Location → Encryption & Credentials & it shows phone encrypted Better method Using adb command adb shell getprop ro.crypto.state ( works on unrooted ...
beeshyams's user avatar
  • 41.1k
11 votes

Removing encryption from recovery

On my Moto G 3rd Gen (osprey), neither calling recovery nor wiping LUKS header (at start and end of partition) worked - I still needed to enter the encryption password during Cyanogen Mod bootup, then ...
Unispezi's user avatar
  • 111
11 votes
Accepted

Is wireless adb encrypted?

Interesting question, let's just try it out in a practical test. I connected to my device (running Android 5.1.1 Lollipop) through ADB over Wi-Fi using adb connect 10.0.0.10 and ran some tests. What ...
famdekk's user avatar
  • 443
8 votes
Accepted

No "Encrypt Phone" option on Android 7.0 Samsung Galaxy S7

Thanks to Samsung non standard implementation, OP couldn't factory-reset and encrypt before selling. They couldn't : Check if the device was encrypted Locate the option for encryption Steps advised :...
beeshyams's user avatar
  • 41.1k
7 votes
Accepted

Attempting to brute force Android security pattern through TWRP via adb

After a while I figured out what the problem was, with a freshly flashed phone. Here I'll be answering my own question. Does the twrp decrypt command output something else when decryption succeeds? ...
Tim Visee's user avatar
  • 261
6 votes

lineage OS encrypt phone --> bootloop

For future reference, choosing repair for /data in TWRP seems to solve bootloops right after encryption. The device stays encrypted. This worked on two of my devices and I didn't notice any data loss.
Guest's user avatar
  • 61
6 votes
Accepted

Decrypting microSD card on another Android device or desktop computer

I don't know of any GUI solutions that fit your needs but can share something about working CLI solutions. DISK ENCRYPTION: external microSD card is not merged with the internal storage You are ...
Irfan Latif's user avatar
  • 20.9k
5 votes

Removing encryption from recovery

Provided that you're using TWRP or similar. reboot to TWRP (enter password), and make a backup of Data partition to external SD or OTG Drive reboot to TWRP (cancel password), and format Data ...
ArtDeineka's user avatar
5 votes

How to encrypt full device on Android Nougat?

Head to Settings > Security > Screen Lock and tap your current screen lock. If “require PIN to start device” is an option, you’re running full-disk encryption. If you’d like to convert to file-based ...
samueleroversi's user avatar
5 votes

Cross-platform compatible encryption of SD-card for Android

FDE In previous versions Android's default encryption for /data and Adoptable Storage was Full Disk Encryption (FDE) which is a custom implementation of dm-crypt. userdata partition (on FDE as well ...
Irfan Latif's user avatar
  • 20.9k
5 votes

Data recovery from encrypted phone based on glitches in the encryption?

I'm not an expert in the filed, it's just an analyses of the case according to my limited knowledge. ANDROID'S ENCRYPTION Android supports two modes of encryption; FDE and FBE. FDE encrypts whole ...
Irfan Latif's user avatar
  • 20.9k
5 votes

What is a "synthetic password" and how is it used by Android?

First, you need to understand, two gatekeeper enrollment processes are involved in synthetic passwords. Here is the process: Generate a synthetic password, it's just a random number Use a real ...
demonguy's user avatar
  • 161
5 votes

Possible to have different passwords for device encryption and screen lock?

On old devices with Full Disc Encryption (FDE) this was possible for rooted devices. But on modern devices that use File Based Encryption (FBE) this is no longer possible nor necessary: In the old ...
Robert's user avatar
  • 21k
4 votes

Removing encryption from recovery

Are you using custom recovery? If yes, then do this after booting to a custom recovery (TWRP in my case): On recovery start, DO NOT decrypt the device. Just tap Cancel when asked of password or ...
Majal's user avatar
  • 242
4 votes

Removing encryption from recovery

The solution of manually wiping the LUKS header provided by Naftuli Tzvi Kay works fine, except for one thing. I do not how what it depends on, but in my experience, Android keeps the LUKS header at ...
lockheed's user avatar
  • 161
4 votes

Is there a way for a user to tell if their Android device is encrypted or not?

If your phone came with Android 5 or above, the storage is encrypted by default. You can verify this by going into Settings > Security & lock screen > Encryption & credentials. It should ...
blade's user avatar
  • 334
4 votes
Accepted

What is the minimum battery level required to start Android encryption?

80% // Minimum battery charge level (in percent) to launch encryption. If the battery charge is // lower than this, encryption should not be activated. private static final int MIN_BATTERY_LEVEL = ...
arcyqwerty's user avatar
4 votes
Accepted

How to resize the /data F2FS partition

As of today (May 30, 2016), the F2FS file system doesn't support shrinking. If it does by the time someone reads this, just let me know in the comments. The solution is then to delete and re-create ...
Marc.2377's user avatar
  • 494
4 votes

Why encrypt the device?

You are right that there is no advantage of encryption if your device screen lock password can be cracked or guessed by an intruder. The moment he / she does that , there is no security offered by ...
beeshyams's user avatar
  • 41.1k
4 votes

Restoring the backup of an encrypted phone

As it turns out, TWRP/nandroid backups aren't encrypted. The encryption layer sits lower at the level of the device. You can therefore restore the backup on a new device like any other backup simply ...
arnuschky's user avatar
  • 171
4 votes
Accepted

TWRP OnePlus 5T not asking for encryption password

From the TWRP terminal enter the command twrp decrypt <your password> Source
Bo Lawson's user avatar
  • 2,598
4 votes
Accepted

How to create filesystem in TWRP? Getting error: "Unable to format to remove encryption"

I had the same problem, and what worked for me, I formatted it from command line, so while in fastboot mode I typed: fastboot format userdata Then I flashed TWRP and rebooted into it and the files in ...
Robert Tattorn's user avatar
4 votes
Accepted

Cryptfs : Unexpected value for crypto key location

this device is encrypted with FDE full-disk-encryption. depending on how you installed Magisk the forceencrypt= flag is gone. that's what the "crypto key location" refer. edit your fstab and ...
alecxs's user avatar
  • 4,099
4 votes

Is Samsung Knox really that great and how can I achieve near-Knox level security on a rooted device?

First of all, rooting does not make your device insecure by design. It adds one more opportunity in the list of existing attack vectors that can be used to compromise your device with no guarantee of ...
defalt's user avatar
  • 1,079
3 votes

Canonical explanation of Android Encryption and Vulnerabilities

I envision it works like this: Storage is encrypted using synchronous random key. When the user chooses or changes a password that is based on whatever input, be it a password comprised of letters ...
Mike's user avatar
  • 139
3 votes

Backing up Android device on Windows via wireless

In my opinion the best and easiest no-cost and nag-free method of backing up [some or all] files from your Android to a Windows machine, uses an underappreciated feature of ES File Explorer, along ...
ashleedawg's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible