27

over a simple password screen lock: nobody can take the internal memory of my phone out of the phone itself. So what is the advantage of 1. over a simple screen lock with password + SIM code lock? Understand that encryption is used to protect the data from unauthorized access (device misplaced or lost or alike situations). If you are sure that the device ...


26

There should have been a warning when you begin the encryption that you had to agree to. The only way to unencrypt it is to perform a factory reset, thereby wiping your data partition completely.


26

nobody can take the internal memory of my phone out of the phone itself While taking out your phone's internal storage out is harder than the SD card, it's definitely not impossible. Rework stations used to extract chips from circuit boards may be expensive, but not outrageously so (around $1000), and can be rented in many electronic repair shops for tens ...


13

Yes, custom recovery works with encrypted honeycomb device. The built-in encryption doesn't touch ROM & firmware at all. It just encrypts accounts, settings, downloaded apps & their data etc. which can be located on phone memory, internal SD or external SD. That's why encryption is no longer present after factory reset because there's no encrypted ...


12

On my encrypted Nexus S I use a temporary tmpfs mount on /sdcard in CWM. It has enough RAM to hold the new ROM in memory during the update: Download your ROM to /tmp/update.zip and boot into recovery. Then log in via 'adb shell': ## on the host machine do: me@workstation:/tmp$ adb shell ## now on the device in 'adb shell' mode... ~ # mount -t tmpfs none /...


12

Marshmallow has two ways to treat the external SD card : Portable Storage : In this the entire memory of the ext.SD card is available for use, if it is not encrypted (natively) and you can mount it on your PC to read/ transfer contents Adoptable-storage: In this the ext. SD is treated as a part of the phone and when you encrypt the phone, the ext. SD card ...


11

The answer for me involved a number of things, but I think one is really the key. Use the "recovery" Command, bro This uses CyanogenMod's/AOSP's recovery program to wipe the user data and disable encryption. (found in this answer on Stack Overflow) Boot into your recovery, and then from your computer run adb shell recovery --wipe_data --...


10

A lot of people are asking that question. Here's one. Some people are offering bounties. Like at XDA-Developers. Some people have suggested alternatives. AxCrypt looks like an alternative, and there's an alpha product that works with it (and Dropbox) called BoxCryptor. But I've not found an actual port of Truecrypt to Android, nor any information about ...


10

Your encryption password is the same as the pattern/PIN/password you use to lock your screen. So simply go to Settings > Security > Screen lock and change it. Note that when you do this Android will ask you whether to also enter the pattern/PIN/password when you start the device in order to make your encrypted device's data unreadable without it. In Android ...


10

I can confirm with 100% certainty that the numbers are indeed 1-9 for the pattern unlock. My Nexus 4 met the same unfortunate end (except on concrete) and after some Googling, I found this post and was able to follow personne3000's answer in order to mount my pattern-encrypted userdata partition. I'm running Ubuntu 15.04 x64 and had to apt-get install ...


10

Google has no idea what the encryption key for your device is. The entire process takes place on your device and the key is never transmitted anywhere. The key itself is also not stored in plaintext on your device: Storing the encrypted key The encrypted key is stored in the crypto metadata. Hardware backing is implemented by using Trusted ...


10

There are three ways to identify which encryption type is used: Identification by device behavior As a user you should be able to identify what encryption scheme is used by the behavior of your device when it boots (e.g. because you restarted it). If the classic Full Disk Encryption is active your device will boot for some time and then present a special ...


9

The current encryption scheme is outlined on the Android website's "Notes on the implementation of encryption in Android 3.0" page. From that page, the specific algorithm used is noted as such: The actual encryption used for the filesystem for first release is 128 AES with CBC and ESSIV:SHA256 That's the only official documentation I've seen for it at ...


8

I'm using Samsung Galaxy Note Android 4.0.3. and I've tried Encrypting and Decrypting several times successfully.


8

In Honeycomb the option is in Settings -> Location and security. In Ice Cream Sandwich it's at Settings -> Personal -> Security -> Encryption. If you're wondering about how Android does encryption, take a look at this: http://source.android.com/tech/encryption/android_crypto_implementation.html Naturally encrypting and decrypting requires some ...


8

There are many available choices, depending on the features you need: Cryptonite uses EncFS and requires root LUKS also requires root and provides on-the-fly encryption (AES by default) to virtual folders Eds provides encrypted containers and does not require root. It even is compatible to TrueCrypt. DroidCrypt can encrypt single files or full directories. ...


8

Yes, 3G traffic will go through your VPN if it's set up correctly. Whether or not your service provider supports that is another matter; some block VPN traffic (such as Verizon - see this thread).


8

Same place where you start the encryption: In (I am on 4.3) Settings -> Options -> Security, the first entry will report the status and offer decrypt (if encrypted) or encrypt (if not).


8

Interesting question, let's just try it out in a practical test. I connected to my device (running Android 5.1.1 Lollipop) through ADB over Wi-Fi using adb connect 10.0.0.10 and ran some tests. What you are seeing is the output of the packets that I captured using Wireshark. Starting a shell in ADB by sending adb shell: 2290 127.822126 192.168.0.41 ...


7

Master reset with hardware keys Turn Off the Device Press and Hold the Volume Up, Home, and Power Button When the phone vibrates release the Power Button, but continue to hold the other two When you see the system recovery screen release the other two buttons Using the Volume down, select "Wipe data / Factory reset" Press Power Button to select it When the ...


7

On Oreo 8.0.0 Settings → Security & Location → Encryption & Credentials & it shows phone encrypted Better method Using adb command adb shell getprop ro.crypto.state ( works on unrooted devices also) returns encrypted or unencrypted Output examples Oreo ( Unrooted, encrypted) Vostro1510 ~ $ adb shell getprop ro.crypto.state ...


6

Encryption is a fairly CPU intensive process, so using more battery is not unexpected. Though it depends a lot upon the apps you use and how much they read/write to the storage. I would expect that an 'idle' Xoom with encryption would last just as long as one without, but if you use an app that does lots of little writes to disk, it will end up using more ...


6

I sent this question into Verizon Wireless as well. Here is their reply: Thank you for contacting Verizon Wireless through our website...I understand that you've been having an issue trying to decrypt files on your handset. At this time Motorola hasn't provided an update for your phone to be able to do this. Without that, we're unable to assist ...


6

Reposting answer for future people! Naturally, I figured it out 10 minutes after posting. Can't answer for another few hours because I'm a new user. Under the security section of the settings, there is a Device Administrator page. I deactivated the "Email" app as an admin. It warned that it would delete all my mail and stuff and I accepted. No factory ...


6

Goggle Drive gives you some security options regarding your documents: You can choose to encrypt all offline documents (that is, documents stored on your device); And can also choose to decrypt documents incrementally as they are streamed to your phone, by selecting the Streaming Decryption, thus having just a small portion of the document decrypted when ...


6

Android provides the capability to do filesystem encryption, but it's up to the vendor who builds the firmware for your device to enable it for the SD card. I have only seen a few devices with this capability enabled for the SD card, though most seem to have it for the internal storage (/data). Typically if it's enabled, there will be a menu item in the ...


6

Summary The encryption of the SD card is a device-specific subject, but as far as Android goes, only /data gets encrypted. Android default behaviour: By "default", for Android, the encryption on the device is applied to /data only. This because all installed applications that get moved to the SD card are already encrypted and only usable at that specific ...


6

I have the same problem when sending encrypted mails from my Apple Mail client with GPGMail2 plug-in. Apparently K9-Mail supports only PGP/Inline and not PGP/MIME which seems to be the standard formatting PGP-Emails today. If you like to test it on your own, configure GPGMail to use inline mode through your Terminal: defaults write org.gpgtools.gpgmail ...


6

On my Moto G 3rd Gen (osprey), neither calling recovery nor wiping LUKS header (at start and end of partition) worked - I still needed to enter the encryption password during Cyanogen Mod bootup, then was stuck with an "encryption error" message. I finally found that my TWRP 3.0.1 recovery has a "Format Data" option in the "Wipe" section. This does a ...


6

There are low(er)-level commands that can be used in a shell to encrypt your user data partition. Disclaimer/Warning: the following instructions will wipe your data, ensure that you make a backup if needed. Following these steps, you should be able to wipe your data partition and have it encrypted afterwards (similar to a factory reset): Boot your phone ...


Only top voted, non community-wiki answers of a minimum length are eligible