Encryption - Google Pixel 3a XL Questions & Answers

I have the unlocked Pixel 3a XL and would like to encrypt the phone. As far as I have been able to tell, that is not possible with the standard ROM and I would have to wait for another ROM? I do prefer LineageOS since previous phones. Of course, I would also then need to install TWRP which would also need to handle encrypted partitions.

The stock ROM supports encryption, which is typically enabled by default. You can check that it's enabled here:
Settings > Security & Location > Advanced > Encryption & Credentials

hendusoone said:
The stock ROM supports encryption, which is typically enabled by default. You can check that it's enabled here:
Settings > Security & Location > Advanced > Encryption & Credentials
Click to expand...
Click to collapse
I did see that but since I do not enter a passphrase when I turn on the phone I am not sure what exactly, if anything, is encrypted?? The PIN on the lock-screen does not count, of course.

That's normal. Everything is still encrypted/inaccessible until you enter your PIN or password. It's a feature called direct boot that was added in 7.0. https://developer.android.com/training/articles/direct-boot

hendusoone said:
That's normal. Everything is still encrypted/inaccessible until you enter your PIN or password. It's a feature called direct boot that was added in 7.0. https://developer.android.com/training/articles/direct-boot
Click to expand...
Click to collapse
I looked at that quickly but it does not seem equivalent to encrypting the entire partition which is what I am looking for.

In that case, you'll need to wait for a rom that supports full disk encryption.

hendusoone said:
In that case, you'll need to wait for a rom that supports full disk encryption.
Click to expand...
Click to collapse
Thank you, that is what I surmised. Waiting for LOS and TWRP and for them to support partition encryption.

I am concerned now after reading this. I factory reset a phone that did not have a pin or any lock screen at all. I need to return it and cancel lease since I bought a new 3a with unlocked bootloader.
Is the data recoverable? If so, can I make a pin and do another factory reset and would that be sufficient for privacy? I have all my passwords on Roboform.

Holysmoke99 said:
I am concerned now after reading this. I factory reset a phone that did not have a pin or any lock screen at all. I need to return it and cancel lease since I bought a new 3a with unlocked bootloader.
Is the data recoverable? If so, can I make a pin and do another factory reset and would that be sufficient for privacy? I have all my passwords on Roboform.
Click to expand...
Click to collapse
If you removed your Google account before resetting you're safe. If you did not then log back in, delete your account from the device and factory reset again. I doubt anyone really cares if you are returning it to a carrier. If you are sending it back to a third party I'd be a little more careful.

The dirty trick is to remove your account, leave password on it, the reset from recovery. That will trigger a full wipe.

hga89 said:
I did see that but since I do not enter a passphrase when I turn on the phone I am not sure what exactly, if anything, is encrypted?? The PIN on the lock-screen does not count, of course.
Click to expand...
Click to collapse
Edit: I guess things have change with device encrypted vs credential encrypted.

hga89 said:
I did see that but since I do not enter a passphrase when I turn on the phone I am not sure what exactly, if anything, is encrypted?? The PIN on the lock-screen does not count, of course.
Click to expand...
Click to collapse
There used to be a way to force a pin on startup before boot. Is that option gone? Haven't used it in years since it was such a pain.

gee one said:
Edit: I guess things have change with device encrypted vs credential encrypted.
Click to expand...
Click to collapse
I am not sure anything changed, encrypting partitions have always been the best - and only real - way of protecting your device. The PINs etc. are eye candy.

hga89 said:
I am not sure anything changed, encrypting partitions have always been the best - and only real - way of protecting your device. The PINs etc. are eye candy.
Click to expand...
Click to collapse
You put on a pin, use the fingerprint scanner for bank accounts, good passwords, what else can you do? A thief will go for the person that has none of these, there are many devices for them to choose from.
If you are that concerned then keep the information off the device. No one wants your stuff as much as you think they do. If I have to encrypt my phone I might as well leave it home or use a pen and paper.

bobby janow said:
You put on a pin, use the fingerprint scanner for bank accounts, good passwords, what else can you do? A thief will go for the person that has none of these, there are many devices for them to choose from.
If you are that concerned then keep the information off the device. No one wants your stuff as much as you think they do. If I have to encrypt my phone I might as well leave it home or use a pen and paper.
Click to expand...
Click to collapse
Our needs and concerns are obviously different. I think it is clear that encryption is recommended by knowledgeable people.

hga89 said:
Our needs and concerns are obviously different. I think it is clear that encryption is recommended by knowledgeable people.
Click to expand...
Click to collapse
Obviously. But I'm sure you can find a company and device that suits your needs.

Related

Device encryption?

Hello everyone,
Unfortunatly my work place requires phones to be "encrypted" in order to work with our google services, so before i buy this phone i would like to know if anyone
can confirm that the zenfone 2 has the option to "Device encryption" in its stock android rom?
Thank you in advance,
best regards!
jesperhla said:
Hello everyone,
Unfortunatly my work place requires phones to be "encrypted" in order to work with our google services, so before i buy this phone i would like to know if anyone
can confirm that the zenfone 2 has the option to "Device encryption" in its stock android rom?
Thank you in advance,
best regards!
Click to expand...
Click to collapse
It is not encrypted by default, but yes, it does support encryption.
alose said:
It is not encrypted by default, but yes, it does support encryption.
Click to expand...
Click to collapse
Thanks alot m8, Its all i needed to know
Last phone i bought (Huawei g750 - Honor 3x) didnt offer this, while i thought it was standard on all androids, so i had to try 5-6 different custom Roms before i found one rendering the option to do so
...That came with another price though
Again, thanks!
alose said:
It is not encrypted by default, but yes, it does support encryption.
Click to expand...
Click to collapse
I just received one of these and the first thing I did was set up my corporate email account which requires encryption. It told me to plug it in and rebooted and encrypted the storage, as normal. Now when it powers up it asks me for the PIN to unlock the storage. And then I just get a black screen when it's finished powering up. Nothing works except for holding the power button, which gives me a menu offering only 'Power Off' and 'Restart'.
I don't even know offhand how to reset it.
Press and hold the power button and vol up. release power after it vibrates, that should get you to the recovery mode and then you should be able to wipe the device. When i eneabled Encryption it ran through for a while then rebooted and came up fine.
yes it does.
seems to be hardware enabled as I see no hit in performance after encryption. It's in Settings Security

[Q] Phone locked due to Fingerprint Swipe. Help!

OK so my mother decides to buy the same phone I have, the Galaxy Note 4. She thought she'd put on the fingerprint lock, which worked fine, then for some reason, stopped working. She claims she did not set up a backup password, so therefore I cannot see a way to get into the phone. I did find a zip to flash that would supposedly remove the fingerprint lock, but upon booting into recovery and into the option to apply an update from an SD card (I forgot the exact text), it gave me a message that dm-verity verification failed and I could not apply an update from the drive. What can I do to fix this? I don't want to have to FDR, but if that's the only options, I might bite the bullet and do that.
JOSHSKORN said:
OK so my mother decides to buy the same phone I have, the Galaxy Note 4. She thought she'd put on the fingerprint lock, which worked fine, then for some reason, stopped working. She claims she did not set up a backup password, so therefore I cannot see a way to get into the phone. I did find a zip to flash that would supposedly remove the fingerprint lock, but upon booting into recovery and into the option to apply an update from an SD card (I forgot the exact text), it gave me a message that dm-verity verification failed and I could not apply an update from the drive. What can I do to fix this? I don't want to have to FDR, but if that's the only options, I might bite the bullet and do that.
Click to expand...
Click to collapse
I'm not sure about this but I don't think an FDR will fix your problem either. I remember someone else having a similar issue with the fingerprint reader and after trial and error we figured out that an FDR doesn't touch the files used to manage the reader.
I don't think Fingerprint lock will allow you to use it unless you enter a backup password. In any case, if a factory reset doesn't work, you might try taking it to you mom's carrier and see if they can unlock it for you. They'll be able to identify that the phone belongs to her account and maybe have the tools to reset it. Try giving the carrier a call. Other than that, I have no idea.
nahoku said:
I don't think Fingerprint lock will allow you to use it unless you enter a backup password. In any case, if a factory reset doesn't work, you might try taking it to you mom's carrier and see if they can unlock it for you. They'll be able to identify that the phone belongs to her account and maybe have the tools to reset it. Try giving the carrier a call. Other than that, I have no idea.
Click to expand...
Click to collapse
Yes, I advised her to take it to the Verizon store where she got it for assistance. She just assumed that I could help her with everything (literally) since she has the same phone...but not that, unfortunately.
You cant use the fingerprint lock without a backup password. it wont let you use it without one, in case the fingerprint doesnt work. If on the lockscreen you see "Enter backup password" that means she entered it. The backup password is 6 character long with a number, it didnt require any caps letter.
fatmaninc said:
You cant use the fingerprint lock without a backup password. it wont let you use it without one, in case the fingerprint doesnt work. If on the lockscreen you see "Enter backup password" that means she entered it. The backup password is 6 character long with a number, it didnt require any caps letter.
Click to expand...
Click to collapse
That's what I thought. Well, she got it fixed at the Verizon store.
Sent from my SM-N910V using Tapatalk

PIN/Pattern required to enable fingerprint

Why is it when I set a fingerprint, I set a pattern for the mandatory backup security but when I try to unlock with fingerprint it asks for a pattern saying "Pattern required to enable fingerprint"?
As far as I know, as an extra security, a pattern/pin code is necessary when the phone is restarted/ switched on, once you chose to use the fingerprint scanner.
Howling Wolf said:
As far as I know, as an extra security, a pattern/pin code is necessary when the phone is restarted/ switched on, once you chose to use the fingerprint scanner.
Click to expand...
Click to collapse
It's every time I lock it
Sent from my HTC 10 using Tapatalk
Finally figured it out.
It happens when screen is locked by a 3rd party app, in my case I use nova double tap to lock screen.
Was wondering why (and forgot to mention) it seemed random.
Edit: for Nova users looking for a workaround, if you enable screen off by root access method it will use a secure lock and enable the fingerprint to unlock.
Heisenberg420 said:
Finally figured it out.
It happens when screen is locked by a 3rd party app, in my case I use nova double tap to lock screen.
Was wondering why (and forgot to mention) it seemed random.
Edit: for Nova users looking for a workaround, if you enable screen off by root access method it will use a secure lock and enable the fingerprint to unlock.
Click to expand...
Click to collapse
yeah a lot of screenapp does ask.... if you are on elementalx you could use button mapper which gives you the same functionality of double to sleep and more doesn't ask for patter/pin everytime you unlock
This started to happen to me after a bug crashed the phone and had to force restart it holding volume down + power. I only have the default launcher so I guess it's factory reset time for me
Heisenberg420 said:
Why is it when I set a fingerprint, I set a pattern for the mandatory backup security but when I try to unlock with fingerprint it asks for a pattern saying "Pattern required to enable fingerprint"?
Click to expand...
Click to collapse
For what it's worth, I had the same issue (until I found this thread) and it was caused by Action Laucher 3. The launcher was set as a Device Administrator and was granted permission to "Power screen off". Once I removed that permission my troubles were over.
Seems to me that it makes sense once you have a fingerprint setup, to require a pin as well. Why? Because what if the fingerprint reader stops working? You won't be able to login?!?!
Not sure until the poster above mentions a pattern is required. Normally it is a pin if you want. Then the PIN required upon restart option as well that is there.
Of course, if you are rooted, you can delete the system files that control/store that...but if not rooted with TWRP, you would have to try a master reset I would assume?!?!
IDK...guess I never thought of testing that out...haha
Guys, i hope it's ok if i conquer this thread for my question but i got serious issues here.
Got my 10 back from repair today and restored my backup.
But dumb me it seems as if i set a password/patern whatever and i can't remember it.
So after the first restart i can't unlock my phone cause it's asking for the code (and won't let unlock only with fingerprint) and i can't remember.
All combination that i would have used are wrong and now i got a working phone back again (after almost 2 month of repairing) and can't unlock it.
Is there any way of bypassing/ignoring the restart password or is it possible to only unlock it again with the fingerprint that is stored?
As i don't know what i should do if i don't get my phone unlocked
bmwbasti said:
Guys, i hope it's ok if i conquer this thread for my question but i got serious issues here.
Got my 10 back from repair today and restored my backup.
But dumb me it seems as if i set a password/patern whatever and i can't remember it.
So after the first restart i can't unlock my phone cause it's asking for the code (and won't let unlock only with fingerprint) and i can't remember.
All combination that i would have used are wrong and now i got a working phone back again (after almost 2 month of repairing) and can't unlock it.
Is there any way of bypassing/ignoring the restart password or is it possible to only unlock it again with the fingerprint that is stored?
As i don't know what i should do if i don't get my phone unlocked
Click to expand...
Click to collapse
Try a factory reset via Android Device Manager.
I don't know what Android Device Manager is but I could do the reset in TWRP too. It's about not losing all of my data or a possibility to get that device unlocked without the code. It would be no problem as my fingerprint is stored. Damn, I could just hit my head against a wall or alternatively just cry like a baby. I never forgot a password or code in my whole life and by now it happens
bmwbasti said:
I don't know what Android Device Manager is but I could do the reset in TWRP too. It's about not losing all of my data or a possibility to get that device unlocked without the code. It would be no problem as my fingerprint is stored. Damn, I could just hit my head against a wall or alternatively just cry like a baby. I never forgot a password or code in my whole life and by now it happens
Click to expand...
Click to collapse
Log in here https://www.google.com/android/devicemanager
Using the account your phone is used with.
Thx, but there I only have the options of letting the phone ring, lock it down or wiping it. As stated above I could do that easily in recovery, too.
I'm looking for a way of not having to wipe the phone (if there is one....)
bmwbasti said:
Thx, but there I only have the options of letting the phone ring, lock it down or wiping it. As stated above I could do that easily in recovery, too.
I'm looking for a way of not having to wipe the phone (if there is one....)
Click to expand...
Click to collapse
To be honest, I don't think so. There were loopholes before, but they have been closed. :/
So doing a factory reset and restoring /data is the only way of getting back control of my phone again (without losing too much data)?
I think i will get rid of locking my phone with fingerprint again as there seems not ot be a failsafe mechanic for forgetting a (backup) mechanic
OK, so it seems that I have to throw that piece of aluminum against the wall. The code seems to interact with /data, because after restoring only /data I have to put in the forgotten password again.
bmwbasti said:
OK, so it seems that I have to throw that piece of aluminum against the wall. The code seems to interact with /data, because after restoring only /data I have to put in the forgotten password again.
Click to expand...
Click to collapse
I really suggest starting from zero, when you get everything set, then set a password.
Thanks for your advice, but it's not about starting from zero. I've already done this twice today
It's about at least being able to get (some of) the data of /data

Please help - Sold OnePlus 3 on eBay - Buyer is stuck on "This device was reset"

Please help - Sold OnePlus 3 on eBay - Buyer is stuck on "This device was reset"
Please help - Sold OnePlus 3 on eBay - Buyer is stuck on "This device was reset" even though I have reset/wiped the device.
What can i do to help them?
The device was sent on the latest OxygenOS.
Thank you so much in advance.
I believe you would need to login to the phone.
The bypass menu only comes up if you reset with either a screen lock active or a google account on the device when you reset.
I am sure when it first came out there was a way around messing with the keyboard or something, but I am unsure if this was patched or not?
this is a google security feature - you need to log into the phone.
best way to do this might be to have them log into the phone and immediately change your account passwords afterwards. not sure what else
byAidan said:
Please help - Sold OnePlus 3 on eBay - Buyer is stuck on "This device was reset" even though I have reset/wiped the device.
What can i do to help them?
The device was sent on the latest OxygenOS.
Thank you so much in advance.
Click to expand...
Click to collapse
Why don't you tell them to turn off the phone, power + volume down, select forgot password and wipe the device? That should be enough to get rid of all previous account data
Sent from my ONEPLUS A3000 using Tapatalk
Wipe the internal storage . Click thanks if helped
Harry Holloway said:
Wipe the internal storage . Click thanks if helped
Click to expand...
Click to collapse
Renosh said:
Why don't you tell them to turn off the phone, power + volume down, select forgot password and wipe the device? That should be enough to get rid of all previous account data
Click to expand...
Click to collapse
This system uses a special partition to "flag" the device as protected from factory resets. These will not work.
2x4 said:
this is a google security feature - you need to log into the phone.
best way to do this might be to have them log into the phone and immediately change your account passwords afterwards. not sure what else
Click to expand...
Click to collapse
I work retail and return phones every day; we NEED to remove the accounts before wiping the device, or else the only reasonable way after wiping the device is logging into the account. 2x4 is right.
ABotelho23 said:
This system uses a special partition to "flag" the device as protected from factory resets. These will not work.
I work retail and return phones every day; we NEED to remove the accounts before wiping the device, or else the only reasonable way after wiping the device is logging into the account. 2x4 is right.
Click to expand...
Click to collapse
Exactly the system, wipe the device by flashing Open Beta or unlock the bootloader and flash a custom ROM and wipe everything, reload stock recovery, wipe everything then sideload 4.1.6.
Working retail you can't play around with phones the same as I would with my own phone so you're dealing in a completely different environment.
There are options in place in case someone messes up its not unrecoverable
Sent from my ONEPLUS A3000 using Tapatalk
Renosh said:
Exactly the system, wipe the device by flashing Open Beta or unlock the bootloader and flash a custom ROM and wipe everything, reload stock recovery, wipe everything then sideload 4.1.6.
Working retail you can't play around with phones the same as I would with my own phone so you're dealing in a completely different environment.
There are options in place in case someone messes up its not unrecoverable
Sent from my ONEPLUS A3000 using Tapatalk
Click to expand...
Click to collapse
Will not be able to unlock the bootloader anymore, it needs to be enabled in the OS. If it's not already unlocked it's not going to be.
I also doubt flashing stock OOS would remove the FRP, that would kind of defeat the purpose of having FRP in the first place if you could just go to the OEM's website and flash something in 5 mins.
Why not simply use the unbrick tool? That should return the phone in a factory-like state.
Sent from my ONEPLUS A3003 using Tapatalk
1) Check this article to see if you can remotely remove the device from your end (never tried this myself): https://help.ting.com/hc/en-us/articles/205666168-Removing-Android-Activation-Lock
2) Assuming your account is not full of sensitive data, change your Google password temporarily and give it to the buyer (may be easier to call or live chat them if possible). Once they get in, change your password back. Not exactly safe, I probably wouldn't do this myself. If you do be sure to take caution- 2 step your account after, force log out all devices to your account.
3) Cough up the shipping cost to return the item and try to sell it again. Unfortunately you would have to pay the return fee + lose the original shipping fee.
TIP: Before selling a device, DO NOT factory reset it then box it up without turning it on. Factory reset, THEN test to be sure it goes to the home screen and working properly. You can then reset it again or sell it at the home screen after skipping the setup steps.
For reference to others reading this thread - always REMOVE your accounts BEFORE factory reset of your devices prior to selling to avoid this issue.
There are lots of ways to bypass this on YouTube. I actually did it yesterday. I had to unlock a tablet. If adb is enabled, it's piece of cake.

Question Screen unlocking or Data recovery

Hey fellow pals, i am in a deep pathetic situation as I got one OnePlus 9 pro and it's screen locked as it's asking for password after its switched on. I am trying to find some methods to unlock or recover the whole data as it's so important because it was my father's and he got expired. I have heard an EDL exploit methode which can be performed. So can someone guide me or help me in finding some methods to do so.
D_i_n_k_a_n said:
Hey fellow pals, i am in a deep pathetic situation as I got one OnePlus 9 pro and it's screen locked as it's asking for password after its switched on. I am trying to find some methods to unlock or recover the whole data as it's so important because it was my father's and he got expired. I have heard an EDL exploit methode which can be performed. So can someone guide me or help me in finding some methods to do so.
Click to expand...
Click to collapse
since they did not know the password, they cannot access the data as it is encrypted. All you have to do is reset the password (whether in recovery or flashing the cell phone with the msm tool)
Would the All-In-One tool help in this situation?
ChrisFeiveel84 said:
since they did not know the password, they cannot access the data as it is encrypted. All you have to do is reset the password (whether in recovery or flashing the cell phone with the msm tool)
Click to expand...
Click to collapse
Thanks for ur kind reply, can u guide me in some other methods where I can recover the files from the device.
TheGhost1951 said:
Would the All-In-One tool help in this situation?
Click to expand...
Click to collapse
Hey what's that? I just need the data saved in the device. Or can I perform some methods to remove the timing, i mean after the incorrect passwords it's taking time for the next attempt
D_i_n_k_a_n said:
Hey what's that? I just need the data saved in the device. Or can I perform some methods to remove the timing, i mean after the incorrect passwords it's taking time for the next attempt
Click to expand...
Click to collapse
Search the forums for it. There is a thread about it with download
D_i_n_k_a_n said:
Thanks for ur kind reply, can u guide me in some other methods where I can recover the files from the device.
Click to expand...
Click to collapse
You have no way of saving the data because you don't know the password and all data on the cell phone is encrypted (if you get to the data you can't do anything with it because it's encrypted, as I said) I like whether the oneplus tool works doubt this needs adb debuging (and i think adb will not be enabled in dev settings )
as an example, even if you read out the data ( user data ) partition with an edl tool, you cannot do anything with the partition because all the data in it is encrypted.
ChrisFeiveel84 said:
You have no way of saving the data because you don't know the password and all data on the cell phone is encrypted (if you get to the data you can't do anything with it because it's encrypted, as I said) I like whether the oneplus tool works doubt this needs adb debuging (and i think adb will not be enabled in dev settings )
as an example, even if you read out the data ( user data ) partition with an edl tool, you cannot do anything with the partition because all the data in it is encrypted.
Click to expand...
Click to collapse
That is why we have passwords, pin numbers and patterns to keep data from prying eyes....to keep unwanted people from getting to our data if we loose the phones!
TheGhost1951 said:
That is why we have passwords, pin numbers and patterns to keep data from prying eyes....to keep unwanted people from getting to our data if we loose the phones!
Click to expand...
Click to collapse
it is exactly like that ! he only has a factory reset to get rid of the password but then all the data is gone
TheGhost1951 said:
Search the forums for it. There is a thread about it with download
Click to expand...
Click to collapse
Can u help me in putting up some links
ChrisFeiveel84 said:
it is exactly like that ! he only has a factory reset to get rid of the password but then all the data is gone
Click to expand...
Click to collapse
Oops. I have heard like using EDL methode i can get into the data and then automate the password injection to decrypt the data. Any comments on it? I actually don't know how to perform it. Will it be usefull?
D_i_n_k_a_n said:
Can u help me in putting up some links
Click to expand...
Click to collapse
It is not going to happen. You will have to reflash the phone, loose everything then it will be a useable phone. You are not going to get any of the data from the phone. Sorry!
TheGhost1951 said:
It is not going to happen. You will have to reflash the phone, loose everything then it will be a useable phone. You are not going to get any of the data from the phone. Sorry!
Click to expand...
Click to collapse
Oh sad..ok i will try typing some known passwords and try. Bcuz I can't loose the data

Categories

Resources