Database Info

No Encrypt Device Option ? Why ?

Why is there no Encrypt device in settings security ? this is hugely important and i can't understand why Oppo decided it's a good idea to remove this ! is there a way to force-enable it ?

To enable encryption you
1. need a ROM that support it. Oppo does not.
2. need a partitioning that support it, r7plusf's doesn't.
3. want a recovery that can decrypt it.
1. CyanogenMod and aicp works. Need one or two fixes though.
2. /data need to be repartitioned, it does not have space for the encryption footer.
3. twrp(3.0.2) can currently not decrypt the device.
1 and 2 is not hard to do, but you still want the recovery to work for updates and backups. I changed a few things and got aicp running with encryption, but found no way to decrypt data in recovery.
Wait and see if Oppo release mm for r7+f, it might have encryption on it (it should have).

teemo said:
To enable encryption you
1. need a ROM that support it. Oppo does not.
2. need a partitioning that support it, r7plusf's doesn't.
3. want a recovery that can decrypt it.
1. CyanogenMod and aicp works. Need one or two fixes though.
2. /data need to be repartitioned, it does not have space for the encryption footer.
3. twrp(3.0.2) can currently not decrypt the device.
1 and 2 is not hard to do, but you still want the recovery to work for updates and backups. I changed a few things and got aicp running with encryption, but found no way to decrypt data in recovery.
Wait and see if Oppo release mm for r7+f, it might have encryption on it (it should have).
Click to expand...
Click to collapse
Got it ! Thanks for the info !

Device encryption

I've searched but the answers seem mixed.
Does Mate 9/Mate 9 Pro have device encryption out of the box? I'm not talking about the fingerprint or PIN lock but the real device encryption in case you lost your phone and the person picked it up tries to bypass locks to get your data.
Have anyone done some serious science to test or verify this?

supposedly all android >= 6.0 are encrypted. Just trust google & huawei

The german Huawei Support say it isnt. You also cant change the decryption Type in the developer section. There is no Option. Any Experts can answer?

Nexus-Nerd said:
The german Huawei Support say it isnt. You also cant change the decryption Type in the developer section. There is no Option. Any Experts can answer?
Click to expand...
Click to collapse
This made me curious since the device can be used without any password or pattern lock, what would be encryption key it uses if there is any?

It uses file-based encryption on /data by default.
https://source.android.com/security/encryption/file-based.html
However, the flag in Mate 9's kernel is fileencryptioninline.
Might be something Huawei changed.
The other thing protecting the partitions is DM-Verity.
Both encryption and verity can be disabled.

The stock image of huawei doesn't use the default android encryption method. However, if you flash a so-called "decrypted" image from https://forum.xda-developers.com/mate-9/development/boot-force-encryption-boot-images-t3558679 , you get all the standard android encryption tools.

Android 7 file based encryption/direct boot but still secure startup option available

Hi, I am using samsung galaxy s7 delivered with an android version before version 7 nougat.
At first I updated OTA. But yesterday I flashed android 7 (last version) via Odin and repartition option. So it should be a clean installation.
As I understood there is file based encryption instead of full encryption now. Bringing an option called direct boot.
As I read the secure startup option should not be available in android 7 (if updated with full wipe). But I also read that it was added again in a newer version of android 7.
I tought if direct boot (without secure startup option) is enabled the device will boot untill lock screen and some option like calls, notifications.. are available. But for example if there is a call, only the number not the name will be displayed because contacts are still encrypted. But when I tested it, the name is displayed. So I think there is no direct boot encryption in my device? Otherwise when I enable secure boot option I have to type in my password before there are notifications and calls.. available...
I want this: After restarting the galaxy s7 it should boot to lock screen. Some notifications and so on should be available (what I think this is direct boot), but my private datas should still be encrypted in a very secure way. After typing in my password all the other apps should be available. After locking the screen encryption protection should be there..
So how can I check if my galaxy s7 is using file based enryption? and why is there still the option "secure boot"? does it bring any advantage in how secure the encryption is? and why?
I am very confused. I would be so glad if anyone can help me! Thank you so much!
Kind regards alex
(please excuese the bad english, I hope everything is understandable...)

How to re-enable encryption due to our ROM

Hey guys,
I had to format my phone and lost all encryption when I went to Android Pie. How can I note enable encryption again now my ROM supports it.
I took a look around but couldn't find any guides.
NOTE: sorry about title, was meant to say " encryption due to Pie ROM
Thanks
Jeff

Decrypt u11 pie

I have had my u11 going on 4 + years, and some things about it I understand quite well and other things not so much ,,with that being said I have 2 part question, is it possible to decrypt pie with twrp and if so how do you know its decrypted? What action or actions can be performed with a decrypted stock pie rom? Thanks for any and all replys.

Um by decrypted meaning usually removing the pin or password or pattern or whatever form of lock screen you have.
Having an unencrypted data partition allows you to make modifications to twrp without any issues but allows intruders for the same.
I have a port of TWRP like orangefox or blackhawk which allows decryption of the data partitiln by entering the lock screen password in twrp itself.