Help please, note 5 stolen from me - Security Discussion

My note 5 sm n920c got stolen, it was protected with fingerprint security and back up pin. I changed my google password, unable to locate or wipe it through my google account, it says can't reach the device, and it doesn't show up in samsung account. What really bothering me is gallery(photos and videos)and other docs(unfortunately no back up either). Is there any way thief might get into my stuff??
Kindly share your expert opinion, I'm really worried about it
Thank you

Somewhat good news from this situation is that thefts are usually for the device and not for the data, so your private information might be intact. Unless you had an SD card where all of your photos and data were kept, the chance of that lessens significantly. Another method is to connect your phone via USB. If it connects thief can access your files that way. Sorry to bring bad news, there are ways. Nothing good about getting a phone stolen, obviously, unfortunate that it happened.
Now as for the main course of action for theft, is to take a phone while its active and do a factory reset, so he can have and use the device. Otherwise, take the phone, try unlocking it, if unsuccessful use external access to factory reset the phone and sell it. I am not an expert, but usually, these type of thieves are not the smartest individuals around when it comes to tech. They want money or other personal gains in the usual scenarios.
Lesson: Keep all of your files backed up, tie your phone near you if possible. I am paranoid, I do that Other than that, stay safe, hopefully, other people can provide a more assure insight.

Means there is a chance thief can get in?

DrMarshal said:
Means there is a chance thief can get in?
Click to expand...
Click to collapse
What software & ver is it running? (have you been applying updates)
Have you rooted it or left developer options on ie adb over usb? Is it encrypted?
There is at least one potential exploit ie "knoxout" if running older OS, it seems. Also possible to spoof the finger print to gain access. But very unlikely your average opportunistic thief will bother with these as will require some knowledge, skills & time. At least the Note 5 doesn't have an SD card so you don't have to worry about the easy access to a portable SD.
Re fingerprints
https://www.theverge.com/2016/5/2/11540962/iphone-samsung-fingerprint-duplicate-hack-security
You should send the remote wipe command so that it'll be wiped if it comes back online (assuming it was enabled before) & report it stolen to your provider to get imei blacklisted, (despite limitations of reporting).

IronRoo said:
What software & ver is it running? (have you been applying updates)
Have you rooted it or left developer options on ie adb over usb? Is it encrypted?
There is at least one potential exploit ie "knoxout" if running older OS, it seems. Also possible to spoof the finger print to gain access. But very unlikely your average opportunistic thief will bother with these as will require some knowledge, skills & time. At least the Note 5 doesn't have an SD card so you don't have to worry about the easy access to a portable SD.
Re fingerprints
https://www.theverge.com/2016/5/2/11540962/iphone-samsung-fingerprint-duplicate-hack-security
You should send the remote wipe command so that it'll be wiped if it comes back online (assuming it was enabled before) & report it stolen to your provider to get imei blacklisted, (despite limitations of reporting).
Click to expand...
Click to collapse
Android 7.0 , and yes i updated it eavh time there was an update. And didn't root it, never opened the developer options menu on it.
I sent the remote wipe command multiple times too

DrMarshal said:
Android 7.0 , and yes i updated it eavh time there was an update. And didn't root it, never opened the developer options menu on it.
I sent the remote wipe command multiple times too
Click to expand...
Click to collapse
If they removed the Sim card that won't work. Which makes all remote wipes really kinda useless.
As stated. Most of the time within a few min if it being found/stolen the Sim is removed and the device reset.

Use your Samsung Account to remotely Find, Lock, Back up, Wipe Your Device at https://findmymobile.samsung.com/

The odds are they factory resetted the phone and discarded the Sim card. Report is lost/stolen on your carrier. If it's an unlocked n5 then you're **** out of luck
---------- Post added at 02:07 AM ---------- Previous post was at 01:59 AM ----------
Also I recommend everybody to set password on boot. Even if they try to reset it they will need a password to get into recovery. Tho they can still use a PC to reset the phone, just make it harder for them to factory reset your phone

Won't work if the Sim is removed and the device is reset.
---------- Post added at 10:13 PM ---------- Previous post was at 10:11 PM ----------
supergear said:
Also I recommend everybody to set password on boot. Even if they try to reset it they will need a password to get into recovery. Tho they can still use a PC to reset the phone, just make it harder for them to factory reset your phone
Click to expand...
Click to collapse
And at that point they just sell it at a local shop and the shop flashes it from the bootloader. Or brute forces the password.

Related

[Completed] Solution to "MDM does not allow factoryReset..." on android devices

Okay so here is a little back story. I work in an IT department and my company loves anything VMWare produces so they use Airwatch for work emails on mobile devices. Airwatch has it's on MDM and provides security for the device in case it ever gets stolen which is awesome, but I had a specific case where the customer had the awesome idea to turn off his wifi internally (can't use airwatch console to remote wipe), and forgot his encryption password and I was like great... So I tried factory resetting it and lo and behold I get the infamous message "MDM does not allow factoryReset"... This is obviously a part of Airwatch's MDM control so someone can't just factory reset a device and claim it as theirs. I know a lot of people recommend Odin and just flash it with another ROM version, but that isn't "company standard" so it's not very advised to do that. So I put my superior IT knowledge to the test and imlemented a grand strategy to fix this.
Alright so for everyone who has this problem you are going to want to follow these steps...
1. Set a password for the device
2. Make sure the device has 80% charge or more
3. Settings -> Security -> Encrypt Device
Now once you have encrypted your device and it has went all the way through. Reboot the device and now on bootup it should ask you for a password to get into your device to see encrypted data. Get this password wrong 15 times (can vary from device) and it will wipe the device clean of any data and it will reboot, then come up as if you're registering a new device from factory reset. I know this solution is a bit caveman status, but it works. Hope this helps!
xzeroun said:
Okay so here is a little back story. I work in an IT department and my company loves anything VMWare produces so they use Airwatch for work emails on mobile devices. Airwatch has it's on MDM and provides security for the device in case it ever gets stolen which is awesome, but I had a specific case where the customer had the awesome idea to turn off his wifi internally (can't use airwatch console to remote wipe), and forgot his encryption password and I was like great... So I tried factory resetting it and lo and behold I get the infamous message "MDM does not allow factoryReset"... This is obviously a part of Airwatch's MDM control so someone can't just factory reset a device and claim it as theirs. I know a lot of people recommend Odin and just flash it with another ROM version, but that isn't "company standard" so it's not very advised to do that. So I put my superior IT knowledge to the test and imlemented a grand strategy to fix this.
Alright so for everyone who has this problem you are going to want to follow these steps...
1. Set a password for the device
2. Make sure the device has 80% charge or more
3. Settings -> Security -> Encrypt Device
Now once you have encrypted your device and it has went all the way through. Reboot the device and now on bootup it should ask you for a password to get into your device to see encrypted data. Get this password wrong 15 times (can vary from device) and it will wipe the device clean of any data and it will reboot, then come up as if you're registering a new device from factory reset. I know this solution is a bit caveman status, but it works. Hope this helps!
Click to expand...
Click to collapse
This is not the place for this post.
Thread closed.
Please post in your device forums.

Samsung FRP bypassing to install TWRP on passworded device WITHOUT data wipe

Hi
Hopefully my title/question isn't too cryptic.
I am a Note 4 user and have been flashing ROM's (thank you Dr.Ketan) and RECOVERY's for a few years now, but on a fairly basic level - so I'm no programmer.
However the issue I have today, that I cannot seem to resolve, is with my wife's Samsung J3 (J320FN) on 5.1.1 stock.
She's let our daughter play with it and our daughter has put a password on the lockscreen but can't remember what it was (or more likely won't tell us what it is).
My initial thought was to install TWRP then view data/system to delete the 3 lockscreen files. Voila! I've done this before on her previous J3 (that she destroyed when she dropped it down the toilet).
However on her new J3 I didn't have the foresight to enable USB debugging or OEM unlock so when I go to flash TWRP, it fails due to FRP.
I've researched on here / Youtube / other sites and can see various methods of getting around this (e.g. rootjunky's method) but they involve going into stock recovery and performing a factory reset / wipe.
But we don't want to wipe the data.
My wife hasn't backed up her phone via KIES and when I asked her for her password for her Samsung account or Google account to see if she had backups online, I got that blank look that a non-technical person gives you when you ask them for their password to help them out with something.
So ultimately we want to get past the lockscreen password to get into the phone, clear the lockscreen password, back up her data / images etc., and reset her Samsung account password (if she set one up) and the Google password.
Am I missing the obvious here? Can it be done? Can TWRP be installed in a manner that bypasses FRP?
Any thoughts would be most appreciated.
Thanks
Spanker333
Update: I tried flashing the stock ROM which "seemed" to work, but it didn't change anything. The phone still booted to the password screen.
http://www.rootjunky.com/universal-samsung-frp-bypass/
---------- Post added at 06:30 PM ---------- Previous post was at 06:29 PM ----------
Doesnt require a reset at least I don't think. I just did this on a s7 edge last week and can confirm it works. I used NFC android beam to beam the apk to the s7 edge that way it was in the internal storage of the s7
---------- Post added at 06:32 PM ---------- Previous post was at 06:30 PM ----------
If it's just a lock screen issue try wondershare dr fone android recovery. Theres an option to bypass lock screen
Thanks for the reply droseofc
I tried your link and used Realterm (as per rootjunky instructions) but because the phone was locked, the commands brought up a locked error.
I tried Android Beam to send a file and then I tried by bluetooth (the J3 has bluetooth switched on). But nothing. I think it is because it locked at the password stage that it won't allow anything to be received that way.
I do own a copy of Dr/Fone Wondershare and I did try that before, however there are only certain phones supported for some features and the J3 isn't one of them.
It's a tough nut to crack!
I shall keep trying.
Cheers!
If you could get into the samsung account online theres a feature on samsung find my phone to unlock the phone screen. Id try resetting samsung password, usually some type of verification is only needed and most of the time a reset link sent to the email on account. What about calling the phone to bypass the lock screen, or if you flash twrp and access the files through twrp to make a backup or hook to pc and drag and copy folders wanted kept. On some phones if the password is entered wrong a certain amount of times itll prompt for a backup pin which may b easier. Although on some phones factory reset automates after a certain amount of incorrect attempts too.
Spanker333 said:
Thanks for the reply droseofc
I tried your link and used Realterm (as per rootjunky instructions) but because the phone was locked, the commands brought up a locked error.
I tried Android Beam to send a file and then I tried by bluetooth (the J3 has bluetooth switched on). But nothing. I think it is because it locked at the password stage that it won't allow anything to be received that way.
I do own a copy of Dr/Fone Wondershare and I did try that before, however there are only certain phones supported for some features and the J3 isn't one of them.
It's a tough nut to crack!
I shall keep trying.
Cheers!
Click to expand...
Click to collapse
---------- Post added at 08:23 AM ---------- Previous post was at 08:20 AM ----------
Reread title and realize twrp is what ur trying to do. If usb debugging is enabled there are adb commands you can send to phone to access frp setting
---------- Post added at 08:26 AM ---------- Previous post was at 08:23 AM ----------
Lol and reread post, no usb debugging. You could try factory recovery and pull a backup using adb. Idk if usb debugging has to be enabled for factory recovery or not. If you reflashed a stock file it shouldve completely wiped internal storage. What is the lock screen exactly
Hi
I had tried adb to try and sideload a rootjunky apk but that didn't work (probably because I didn't really know what I was doing lol).
Yes, the TWRP wouldn't install because of the FRP.
We got the Google account password (reset it) and then went to Android Device Manager > Lock and set a new password.
Just when I did that there was a small blue message under the ADM that stated that the phone was now locked BUT since it already had a password on the lock screen the new one wouldn't be needed.
I thought that ADM would set a new password lock for the phone because that's what I had seen in some Youtube videos. But apparently it will set a new password for the lock screen if the previous lock method was code or pattern - but not if there was already a password.
I tried the "calling the phone > answering > backing out of the phone app" method, but that didn't work.
I tried entering the password multiple times to get the 30 second wait, hoping that after trying this many times I would get an option of "Forgot Password" and a reset link. But nope. Not having it.
I wish I had thought of trying to get into a Samsung account but the wife seemed adamant that she hadn't set one up to start with so that wasn't at the forefront of my mind.
So I went recovery > wipe / factory reset in the hope that I could use my Dr.Phone to recover deleted files. A bit of a long shot but worth a go as that programme has done wonders in the past.
However, due to FRP when I am at the setup screen I am asked to enter the email address associated with the Google Account that was on the phone before. To be expected of course. However entering the Google account login details isn't working now so I've just been to my local Maplins (like Radio Shack I guess) and bought an OTG adaptor.
I'm now going to try and follow another one of rootjunky's videos to bypass the FRP (I tried the most recent one where he used another phones wifi to tether to but it wouldn't work).
I've not heard of the adb. Idk command you mention but I'll do a search on it to see how it is used.
What a ton of messing to get to this stage. But I like doing this stuff anyway so the challenges are welcome.
Once the OTG method works I need to root the phone to get Dr.Fone to work as from previous experience with the old J3, it needs root to work.
Having fun!
Cheers
(PS. "What is the lock screen exactly" - the screen that comes up after boot and prompts you for a password / pattern / code to get to the home screen. Not sure if that is what you meant in your question though).
Idk if u tried this method but i did successfully after a reset done the way you did and to bypass the same dilemma you describe. http://www.bane-tech.com/samsung-frp-bypass-universal-method/ the trickiest part is probably catching the phone in time after the call screen pops up after entering commands in realterm. I suggest watching the video and pausing as you go to make sure each step is done.
Spanker333 said:
Hi
I had tried adb to try and sideload a rootjunky apk but that didn't work (probably because I didn't really know what I was doing lol).
Yes, the TWRP wouldn't install because of the FRP.
We got the Google account password (reset it) and then went to Android Device Manager > Lock and set a new password.
Just when I did that there was a small blue message under the ADM that stated that the phone was now locked BUT since it already had a password on the lock screen the new one wouldn't be needed.
I thought that ADM would set a new password lock for the phone because that's what I had seen in some Youtube videos. But apparently it will set a new password for the lock screen if the previous lock method was code or pattern - but not if there was already a password.
I tried the "calling the phone > answering > backing out of the phone app" method, but that didn't work.
I tried entering the password multiple times to get the 30 second wait, hoping that after trying this many times I would get an option of "Forgot Password" and a reset link. But nope. Not having it.
I wish I had thought of trying to get into a Samsung account but the wife seemed adamant that she hadn't set one up to start with so that wasn't at the forefront of my mind.
So I went recovery > wipe / factory reset in the hope that I could use my Dr.Phone to recover deleted files. A bit of a long shot but worth a go as that programme has done wonders in the past.
However, due to FRP when I am at the setup screen I am asked to enter the email address associated with the Google Account that was on the phone before. To be expected of course. However entering the Google account login details isn't working now so I've just been to my local Maplins (like Radio Shack I guess) and bought an OTG adaptor.
I'm now going to try and follow another one of rootjunky's videos to bypass the FRP (I tried the most recent one where he used another phones wifi to tether to but it wouldn't work).
I've not heard of the adb. Idk command you mention but I'll do a search on it to see how it is used.
What a ton of messing to get to this stage. But I like doing this stuff anyway so the challenges are welcome.
Once the OTG method works I need to root the phone to get Dr.Fone to work as from previous experience with the old J3, it needs root to work.
Having fun!
Cheers
(PS. "What is the lock screen exactly" - the screen that comes up after boot and prompts you for a password / pattern / code to get to the home screen. Not sure if that is what you meant in your question though).
Click to expand...
Click to collapse
---------- Post added at 02:24 PM ---------- Previous post was at 02:18 PM ----------
As for lock screen i was meaning more like was it pin, pattern, password, fingerprint etc. But since you are passed that id recommend the method that involves frp apk to phone, you may have a hard time with that without nfc, u may be able to sideload it using stock recovery and hooking to a pc, idk if the pc will recognize it as storage though. There are adb commands to send files to a phone, you may be able enter adb via recovery. Unless u have a sd slot or a usb that also has the phone mini usb on other end and u could put apk on usb and plug usb into phone and navigate to it when needed.
---------- Post added at 02:29 PM ---------- Previous post was at 02:24 PM ----------
Once you got that all done id recommend using deft to recover files, its a linux distro, free and can be used without installing aka live. Its said to be used by law enforcement and military. Theres also a manual download which id suggest having just in case. Itd be the most thorough way of recovery but also requires a bit of focus as its advanced. Otherwise there are several android recovery programs, most working the best if phone is rooted.
ironically I received a J3 j320r that is google lock out. Basically i fix or clean/upgrade pcs/cells just by word of mouth and today got the j3. definitley can not use that root junky method, the realterm shows error on each command send. it does have a sd card slot though, but need to access dialer somehow. you figure any ways out?
---------- Post added at 12:44 AM ---------- Previous post was at 12:44 AM ----------
or did u give up and give it to the person that gave it to me? lol
droseofc said:
ironically I received a J3 j320r that is google lock out. Basically i fix or clean/upgrade pcs/cells just by word of mouth and today got the j3. definitley can not use that root junky method, the realterm shows error on each command send. it does have a sd card slot though, but need to access dialer somehow. you figure any ways out?
---------- Post added at 12:44 AM ---------- Previous post was at 12:44 AM ----------
or did u give up and give it to the person that gave it to me? lol
Click to expand...
Click to collapse
I have had my J3 almost two weeks I'm almost sure it has the latest security patch and I can not get a keyboard to pop up I even went as far as Copying Pasting almost a full account info registration but was short one # to complete it it has One # A 8..well Ive exhaustied most steps I'm hoping today I can finally use MY less then two week old FRP locked J320W8 LOL..any help would be great but yes I get stuck without keyboard
Sent from my SM-G900W8 using XDA-Developers mobile app
At this same time i had a zte warp 7 that was similar in setup but didnt have samsung nemore to test but should still work. Alls you may need to do is another reset because the keyboard should pull up.
The farthest i got into the phone itself is by resetting it through recovery, and when the phone first turns on it asks you if you want to enable accessibility. This is the only time it will ask so if you miss it u have to reset again. But click on accessibility and enable talkback and switch access. With switch access it will popup a tutorial u can skip or do. But with switch access on you can swipe down and to the right which will bring up a menu, i went to switch access settings and gesture control and customized the side double tap to recent apps. With the swipe down and to right i believe i clicked talkback settings and through that i was able to get to the phone settings. You have to get to app settings i cant remember exactly how but its only possible with switch access on. Once you do you can swipe down and to right to turn off switch access which will turn itself back on if u turn screen off and back on jst n case u need it to get back as its easier with it off once u get where u need, but can only get there with it on, sometimes depending on wat u click it'll take u back to setup wizard where its locked, turn screen off back on and doubletap or swipe down right to get recent apps or settings again. In the app settings i went through each one and enabled what i thought to help such as internet browser security settings allowing access to each. If you force stop and clear data on the setupwizard (green one I think) it will reenable the swipe down bar up top. I got as far as logging in google account using a chrome browser popup by clicking one of the terms and conditions links. Got notified of log in and everything but still locked out. Wouldnt install apps no matter what i tried.
Cassybalfourjr said:
I have had my J3 almost two weeks I'm almost sure it has the latest security patch and I can not get a keyboard to pop up I even went as far as Copying Pasting almost a full account info registration but was short one # to complete it it has One # A 8..well Ive exhaustied most steps I'm hoping today I can finally use MY less then two week old FRP locked J320W8 LOL..any help would be great but yes I get stuck without keyboard
Sent from my SM-G900W8 using XDA-Developers mobile app
Click to expand...
Click to collapse
---------- Post added at 11:51 AM ---------- Previous post was at 11:35 AM ----------
Ive actually been thinking of writing google about this whole frp thing. I dont see how they see they are empowered to lock devices out completely because of a different account being used to log in. I understand why they think they need to do it. But if the phone wasnt reported lost by the owner it should be considered that the owner is fully aware the phone is being used on a different account. Android is google but the phone purchased by the owner is not. Its up to the owner to decide if the pbones lost or stolen, not google. Sure this may have saved a few stolen phones, but every stolen pjone could be by their owners taking the responsible steps. Itd be like selling a car that is somehow linked to owner (fingerprint, insurance whatever) and dodge or gmc locking the car down because of it. Causes issues for people and not just the stolen ones. Isnt it generally wrong to punish an entire society because of a small group who break the rules? (Obamacare) There is PLENTY of data tracking and options for the owner of the phone to track their phone, lock it, wipe it and report it (also for google to know everything you do, everything) that google should not be able to or need to automatically lock a device because it was logged in with a different account UNLESS the OWNER reports it stolen. After all it is the owners phone. Unless its on contract then once its reported stolen the carrier can do what they need to for recovery. Google should release their grasp on society a little bit, stop default enable tracking our location, our voice searches, our internet searches, our lives unless we turn it on and shouldnt lock out OUR devices unless WE report it stolen. Google has got to be in with the military and i aint tryn to go conspiracy talks here but with everything that they are allowed to control and have, google earth images of things normally that would be thought questionable to see with stamps on the screen stating where the image is from (us navy etc.) I do not think the us military would allow aerial photos to be displayed by a company of their us military bsses unless it was the us military displaying them
droseofc said:
At this same time i had a zte warp 7 that was similar in setup but didnt have samsung nemore to test but should still work. Alls you may need to do is another reset because the keyboard should pull up.
The farthest i got into the phone itself is by resetting it through recovery, and when the phone first turns on it asks you if you want to enable accessibility. This is the only time it will ask so if you miss it u have to reset again. But click on accessibility and enable talkback and switch access. With switch access it will popup a tutorial u can skip or do. But with switch access on you can swipe down and to the right which will bring up a menu, i went to switch access settings and gesture control and customized the side double tap to recent apps. With the swipe down and to right i believe i clicked talkback settings and through that i was able to get to the phone settings. You have to get to app settings i cant remember exactly how but its only possible with switch access on. Once you do you can swipe down and to right to turn off switch access which will turn itself back on if u turn screen off and back on jst n case u need it to get back as its easier with it off once u get where u need, but can only get there with it on, sometimes depending on wat u click it'll take u back to setup wizard where its locked, turn screen off back on and doubletap or swipe down right to get recent apps or settings again. In the app settings i went through each one and enabled what i thought to help such as internet browser security settings allowing access to each. If you force stop and clear data on the setupwizard (green one I think) it will reenable the swipe down bar up top. I got as far as logging in google account using a chrome browser popup by clicking one of the terms and conditions links. Got notified of log in and everything but still locked out. Wouldnt install apps no matter what i tried.
---------- Post added at 11:51 AM ---------- Previous post was at 11:35 AM ----------
Ive actually been thinking of writing google about this whole frp thing. I dont see how they see they are empowered to lock devices out completely because of a different account being used to log in. I understand why they think they need to do it. But if the phone wasnt reported lost by the owner it should be considered that the owner is fully aware the phone is being used on a different account. Android is google but the phone purchased by the owner is not. Its up to the owner to decide if the pbones lost or stolen, not google. Sure this may have saved a few stolen phones, but every stolen pjone could be by their owners taking the responsible steps. Itd be like selling a car that is somehow linked to owner (fingerprint, insurance whatever) and dodge or gmc locking the car down because of it. Causes issues for people and not just the stolen ones. Isnt it generally wrong to punish an entire society because of a small group who break the rules? (Obamacare) There is PLENTY of data tracking and options for the owner of the phone to track their phone, lock it, wipe it and report it (also for google to know everything you do, everything) that google should not be able to or need to automatically lock a device because it was logged in with a different account UNLESS the OWNER reports it stolen. After all it is the owners phone. Unless its on contract then once its reported stolen the carrier can do what they need to for recovery. Google should release their grasp on society a little bit, stop default enable tracking our location, our voice searches, our internet searches, our lives unless we turn it on and shouldnt lock out OUR devices unless WE report it stolen. Google has got to be in with the military and i aint tryn to go conspiracy talks here but with everything that they are allowed to control and have, google earth images of things normally that would be thought questionable to see with stamps on the screen stating where the image is from (us navy etc.) I do not think the us military would allow aerial photos to be displayed by a company of their us military bsses unless it was the us military displaying them
Click to expand...
Click to collapse
Well I went through everything and no switch access at anytime at all..would I have better luck making my friend an "account" before getting to that sign in part I get "no keyboard in"? Or will it just tell me what its been telling me...Your app and functions or whatever have been revoked or not permittee some kinda thing like that.. I m guessing this may the very latest security patch and it shut down accessibility options keyboard options and getting past sign in options I get as far as google terms click on it and one click I have browser but when I try sign in from browser no keyboard and when I copy and paste I get sent back to main FRP screen again without my PIN I've entered being enabled as well
Sent from my SM-G900W8 using XDA-Developers mobile app
Its going to be near impossible to login without a keyboard popup and sorry about the switchback thing, must be a zte setting. Youve reset the phone using recovery? Power off, hold vol up, home and power until it turns on and let go should get u to recovery. Factory reset, delete cache reboot. Should take you to initial setup until you get to google login part where you will need to log in with same account used the first time phone was setup. Is the phone asking for a pin or does it say this phone has been reset in an unusual way or whatever and to log in with owner google account? If its just the pin screen and u havent reset it id maybe hold off as it may be easier to get through that than the google frp lock. If you have a mini usb to usb otg adapter you could plug adapter in phone and use a pc keyboard, or if u have a rooted phone laying around you can use usb keyboard app which when plugged in is the same as a keyboard. Its not going to help with any amount of accounts made if you have no way of typing them in at that log in screen. If you have factory reset and it does get to google login screen asking for first owner login and no keyboard popup there had to be an issue and i would download/redownload stock firmware and flash in odin because if its asking for a login it should definitely have a way fof entering that in. The only time ive had no keyboard popup is when i have set the default input method to something other then samsung keyboard like sixaxis controller which needs switched back to use keyboard
Cassybalfourjr said:
Well I went through everything and no switch access at anytime at all..would I have better luck making my friend an "account" before getting to that sign in part I get "no keyboard in"? Or will it just tell me what its been telling me...Your app and functions or whatever have been revoked or not permittee some kinda thing like that.. I m guessing this may the very latest security patch and it shut down accessibility options keyboard options and getting past sign in options I get as far as google terms click on it and one click I have browser but when I try sign in from browser no keyboard and when I copy and paste I get sent back to main FRP screen again without my PIN I've entered being enabled as well
Sent from my SM-G900W8 using XDA-Developers mobile app
Click to expand...
Click to collapse
---------- Post added at 12:27 PM ---------- Previous post was at 12:24 PM ----------
If u havent reset the phone and it is a pin and if u had enabled usb debugging prior to the phone being locked you may have options. If usb debugging is not enabled or if u did reset it options become slimmer. I have heard that not trying to login on the device for 72 hour will reset the account thing and allow a login. Not sure if it works, never had the patience.
---------- Post added at 12:43 PM ---------- Previous post was at 12:27 PM ----------
I found by trying whatever i could theres some way of getting to the settings itself. Easiest was by getting the google app to pull up and searching settings. I did this by getting to the app settings from talkback options and finding someway of getting to its app settings and then clicking menu and going to all apps. From there you could find keyboard and make sure its allowed access to each option. If google app doesnt list settings as a option you will have to make sure in app settings you enable access to phone/storage and then it should. I clicked basically every option available in every route there was and some was dead end, some would get into areas not available before. If your issue is keyboard id try to get to its settings by trying everyroute u can and enabling access for it and every application you think may be helpful in getting where you need. I found when its locked out nearly every app has no access to any features by default so for instance keyboard may not have access to phone and wont popup when needed. You will need to show system apps once in the app settings by clicking menu up top. You may also want to go to apps that can change system settings and enable ones that appear useable. If u get there u can also force stop setupwizard and clear data which will allow bar up top to be pulled down making getting there a whole lot easier. Dont get hopes up, i did all of this and in the end gave up. Without being able to install apps its kind of hard to bypass. May have been a simple enable of whatever installs apps to allowing access but didnt find. The last thing i did try which may have worked was getting another phone and turn on hotspot and on locked phone connecting to it at wifi screen and as soon as it goes to checking connection screen turning off the hotspot and phone should go to screen asking for first and last name. U could do this with wifi just easier to turn off on hotspot. It may take a few tries and probably will. 9/10 times itll say there was an error and go back to wifi setup. I was able to enter name and setup a lock for the screen. Didnt venture further. Also when i did get to settings and went to backup and reset clicking reset didnt do anything. This is the way to reset without getting frp locked out but the option was disabled.
I bought the phone I didn't set up anything BC I was charging the phone until I would be back later on that night...babysitter as smart as she is signs in with her account BC its a brand new phone that MAKES you sign in to get the most as she put it..SMH..any who she replaced my phone I the box where I left it didnt sign out properly so my SON showed her how a Hard Reset is done!! Yeah you get the picture right ?! So that's my brand new phone with a DAMN FRP lock on it..oh yeah it dont matter if you've got the receipt or not anymore they say..???? Isn't that the whole reason behind a Sales Receipt?? Not gthe whole reason but yeah...long story short I have an Awesomely Rooted KLTE device and I was wondering where I may be able to find this app? And I do really appreciate your time and effort into helping me..when ur so stumped all you come up with is a different spot to get stumped again?
Sent from my SM-G900W8 using XDA-Developers mobile app
Never mind found a way in thanks anyways
Sent from my SM-G900W8 using XDA-Developers mobile app
Cassybalfourjr said:
I have had my J3 almost two weeks I'm almost sure it has the latest security patch and I can not get a keyboard to pop up I even went as far as Copying Pasting almost a full account info registration but was short one # to complete it it has One # A 8..well Ive exhaustied most steps I'm hoping today I can finally use MY less then two week old FRP locked J320W8 LOL..any help would be great but yes I get stuck without keyboard
Sent from my SM-G900W8 using XDA-Developers mobile app
Click to expand...
Click to collapse
frp reset is possible, i used program chimera tool. what i need is a twrp for this model w8, or a root method, or an older firmware. if you can share any of these please do. Thanks
bilalwiggles said:
frp reset is possible, i used program chimera tool. what i need is a twrp for this model w8, or a root method, or an older firmware. if you can share any of these please do. Thanks
Click to expand...
Click to collapse
I've used real term for this one and did an exploit I'm not so sure if they've figured it out yet but Novembers security patch is harder too can't wait to try December's
Sent From An Awesome S5
So nearly reading the complete thread, it didn't help me out.?.
My problem is.
A couple of months my s7 edge panel broke, so today i repaired it and saw that it had a pattern lock. So i forgot completely and i thought something would help me ro bypass it without losing the data but nothing helped.
1. I don't remember the pattern
2. Usb debugging is disabled.
3. Cant install twrp because of frp lock
4. The Google account password is already changed so i can't use ADM.
5. There is no mobile data or wifi enabling.
Now help me out plz.
If anyone can ask for further to research i can tell.
Thanks

Making the S8+ completely theft proof

Hey!
It's my first post here so it this isn't the best place for such a question then by all means mods pls move the thread to where it should be
Basically, where I'm currently living (Brazil), things tend to get pretty violent and phone thefts are very common. Now the thing is, if it's an iPhone usually the thieves just throw it away, as once it's locked it becomes useless. When it comes to Android though, some of them will dig deep trying to access your info like pictures, passwords, bank information, among other things. They even manage to break IMEI locks and stuff. I got my S5 stolen recently and the information theft part put me through hell. Yet, I'd much rather have an S8+ then any other iPhone currently, so my question is how could I completely theft proof it?
I'm not really worried about them restoring the phone and reselling it, more about them accessing the data inside of it. I know the SD card can be protected through cryptography (although would accept "stronger" tips if there are any). When it comes to apps, aside from the basics of trusting what you install and stuff, are apps like Cerberus, Knox 2.0, or other Samsung features I'm not aware of, any good against someone who knows what they're doing? Is there a way to disable airplane mode or power offs? Also what is probably my strongest concern: is there a way to completely not allow system changes through a computer, like the one that removes the lock screen?
Being a programmer and computer science undergrad student (although not specializing in security nor mobile), I'd have no problem if the solutions would involve some coding or tweaking, just as long as they prove to be effective.
So, would you guys have any tips on how to completely secure the data given those concerns?
The sd card can be Encrypted and if you have a password lock (fingerprint irsi etc...) then it will ask for that before it will unlock the phone.
Also they have a remote wipe. You can log i to google and remote wipe your phone when you found out its been stolen.
You can set the phone to require a password to decrypt it when it's restarted. You can encrypt the SD card too. You can set it to lock instantly when the screen turns off. And you can use only a password to unlock it (no biometrics), which is the most secure option (if you use a suitable password). Finally, you can set the phone so that you can wipe it remotely, or to wipe itself after a number of consecutive incorrect password attempts. But even without the last two measures, your data will be unreadable without your password.
Unfortunately, though, if thieves are violent enough, they may be able to coerce you into divulging the password. If they succeed, they have full access to your phone.
Gary02468 said:
You can set the phone to require a password to decrypt it when it's restarted. You can encrypt the SD card too. You can set it to lock instantly when the screen turns off. And you can use only a password to unlock it (no biometrics), which is the most secure option (if you use a suitable password). Finally, you can set the phone so that you can wipe it remotely, or to wipe itself after a number of consecutive incorrect password attempts. But even without the last two measures, your data will be unreadable without your password.
Unfortunately, though, if thieves are violent enough, they may be able to coerce you into divulging the password. If they succeed, they have full access to your phone.
Click to expand...
Click to collapse
What about stuff like that Dr. Fone Toolkit that supposedly removes the lock screen? From the quick look I took it seems it somehow patches the Android on the phone to remove the lock screen. Is there some sort of system encryption/lock to avoid that kind of stuff when connected to a computer?
xile6 said:
The sd card can be Encrypted and if you have a password lock (fingerprint irsi etc...) then it will ask for that before it will unlock the phone.
Also they have a remote wipe. You can log i to google and remote wipe your phone when you found out its been stolen.
Click to expand...
Click to collapse
Usually they just put it on airplane mode though, so google remote wipe is useless... Which is why I was looking for more of an offline fix through cryptography and such
I use smart Lockscreen protector to prevent somebody putting my phone to airline mode or shutting it down ( It won't help phones with removable battery)
If you have the phone encrypted and have the require pin on boot set. And you have the Qualcomm version that is locked down you have nothing to worry about.
Even the iPhone 7 has been jail broken or rooted the S8 with the Qualcomm chip is one of only a few phones that have not been hacked. It's actually WAY more secure than an iPhone.
lvrma said:
What about stuff like that Dr. Fone Toolkit that supposedly removes the lock screen? From the quick look I took it seems it somehow patches the Android on the phone to remove the lock screen. Is there some sort of system encryption/lock to avoid that kind of stuff when connected to a computer?
Click to expand...
Click to collapse
The phone is completely encrypted, so if you set it to require a password to restart and to turn the screen back on, then its contents are unreadable without the password regardless of how you connect to it.
lvrma said:
...
Usually they just put it on airplane mode though, so google remote wipe is useless... Which is why I was looking for more of an offline fix through cryptography and such
Click to expand...
Click to collapse
If you have a lock screen set you can lock the status of your phone(wifi state, airplane mode, power settings). This way you have to unlock it to toggle these modes.
I just ran across this, some good advice.
http://thedroidguy.com/2017/04/setu...security-features-tutorials-1071462#Tutorial1
lvrma said:
What about stuff like that Dr. Fone Toolkit that supposedly removes the lock screen? From the quick look I took it seems it somehow patches the Android on the phone to remove the lock screen. Is there some sort of system encryption/lock to avoid that kind of stuff when connected to a computer?
Click to expand...
Click to collapse
Like you, I'm interested with this topic, but unlike you, I would like the theief to have a useless phone if they cant unlock it. So that they would think twice the next time they want to steal an android. Else they would just continue stealing since you just put the phone on download mode, connect to a computer and root it.
About your question. Isnt disabling usb debugging mode on developer option block that risk? Also in my note 4, enabling knox will prevent your device from being rooted, at least thats what i understand from the description. i wonder where it is in s8.
speaking of knox, s8 has "Secure folder". its like a secured environment within a phone. Everything you put in here will be protected by knox. Apps, accounts, files, etc. And it would ask for another security to access it(pattern/pin/password).
lvrma said:
Usually they just put it on airplane mode though, so google remote wipe is useless... Which is why I was looking for more of an offline fix through cryptography and such
Click to expand...
Click to collapse
you mentioned cerberus app, it has a function than can wipe device memory and wipe sd card via SMS command. so if you are fast enough, while the thief is running away and before he pulls out your sim card from the phone, you can send an sms command to wipe data.
Since you mentioned you are a programmer, this may be interesting to you, locking download mode and recovery mode on android to prevent thief from flashing hack to your phone. but this require a bit of patience if android isnt your forte.
https://ge0n0sis.github.io/posts/20...-mode-using-an-undocumented-feature-of-aboot/
BratPAQ said:
Like you, I'm interested with this topic, but unlike you, I would like the theief to have a useless phone if they cant unlock it. So that they would think twice the next time they want to steal an android. Else they would just continue stealing since you just put the phone on download mode, connect to a computer and root it.
About your question. Isnt disabling usb debugging mode on developer option block that risk? Also in my note 4, enabling knox will prevent your device from being rooted, at least thats what i understand from the description. i wonder where it is in s8.
speaking of knox, s8 has "Secure folder". its like a secured environment within a phone. Everything you put in here will be protected by knox. Apps, accounts, files, etc. And it would ask for another security to access it(pattern/pin/password).
you mentioned cerberus app, it has a function than can wipe device memory and wipe sd card via SMS command. so if you are fast enough, while the thief is running away and before he pulls out your sim card from the phone, you can send an sms command to wipe data.
Since you mentioned you are a programmer, this may be interesting to you, locking download mode and recovery mode on android to prevent thief from flashing hack to your phone. but this require a bit of patience if android isnt your forte.
https://ge0n0sis.github.io/posts/20...-mode-using-an-undocumented-feature-of-aboot/
Click to expand...
Click to collapse
Don't put your phone anywhere besides your pocket. Get a cover that makes it look like as different phone with a cracked screen.
the easiest way to encrypt sd and phone, enable adoptable storage.
cantenna said:
the easiest way to encrypt sd and phone, enable adoptable storage.
Click to expand...
Click to collapse
How is that easier than just selecting the Settings options to encrypt the SD card and to require a password to unlock upon restart?
---------- Post added at 06:08 AM ---------- Previous post was at 05:11 AM ----------
lvrma said:
Usually they just put it on airplane mode though, so google remote wipe is useless[.] Which is why I was looking for more of an offline fix through cryptography and such
Click to expand...
Click to collapse
Yes, and even without airplane mode, they can physically enclose the phone to block all electronic signals. Encrypting the phone (and SD card), using a secure password as the sole unlock method, affords the strongest protection against all attacks (except coercing the password from you).
Gary02468 said:
How is that easier than just selecting the Settings options to encrypt the SD card and to require a password to unlock upon restart?
---------- Post added at 06:08 AM ---------- Previous post was at 05:11 AM ----------
Yes, and even without airplane mode, they can physically enclose the phone to block all electronic signals. Encrypting the phone (and SD card), using a secure password as the sole unlock method, affords the strongest protection against all attacks (except coercing the password from you).
Click to expand...
Click to collapse
oh yea, may bad, i often assume everyone on xda is here because there interested in unlocked boot loaders, root and custom kernels. My recomindation applies only to people who have unlocked pandor's box only.
the method of encyption you suggested the isnt availble for users like me but we can enable adoptable storage which does encrypt the system by other means and it is compatible with root, etc
dynospectrum said:
Don't put your phone anywhere besides your pocket. Get a cover that makes it look like as different phone with a cracked screen.
Click to expand...
Click to collapse
Where can you get/ how can you make such a cover?
Also sometimes when I'm in bad Areas, I go to developer options and turn on some of the screen update stuff, so it flashes the screen purple a lot and make it look messed up.

Security of ios vs android , an important doubt.

Can the data in an iphone can be erased like android mobile by going to recovery mode by pressing 2/3 buttons of mobiles . If not then what happens ?
What? If you want to know about resetting an iPhone, ask in an iPhone forum?
Sent from my SM-G955U using Tapatalk
I don't want to reset an iPhone, I''m just asking a security case. Let's imagine our android being stolen, then the thief can certainly press the power and volume key and can easily wipe data and factory reset the mobile phone by just simply going to recovery. So it'll be impossible for us to find the phone.
But I'm asking in case of an iPhone is this same case possible? Can a thief just simply wipe the data and reset the mobile by pressing some keys and without unlocking the mobile ?
Gotcha. I haven't used an iPhone in years, so don't know.
I still think it's weird to ask an iPhone reset question in an Android forum though. You would probably get your answer in a minute if you just ask in an apple forum...
Sent from my SM-G955U using Tapatalk
Isn't the whole point of factory reset protection on android that it renders the device useless to someone who does this? Sure, it won't stop them actually resetting it, so you won't be able to track it afterwards, but the idea is that the thieves will learn that it's a waste of time.
Apple have something to prevent you just wiping a phone and making it yours, but I can't remember the details (i.e. whether it prevents the reset or, like the Google version, prevents you from using it afterwards).
Sent from my Pixel 2 using XDA-Developers Legacy app
I concur with @Large Hadron
On an iPhone, someone could enter the password incorrectly several times and the device would be wiped. It would not be usable, but it would be wiped. They could also connect the iPhone to a computer / mac with itunes and flash a factory image from there. Again, the device would be useless to them, but you wouldn't be able to recover your device from the thief.
Comparing an iPhone to a Pixel 1 or 2, both device could easily have the data wiped from the device. To that effect, the data is secure on both devices, which is by far the most important part. Recovering your lost / stolen device is an entirely different conversation. The benefit of an iPhone when lost / stolen is the device is a brick without the previous user's icloud email and password. Once it boots up, it asks for this before you can setup the phone. There is no way around this (without Apple's intervention). On a Pixel 1 or 2, the device could be wiped, but I believe the thief could then use the phone as their own. There is nothing that would "brick" the phone after a full data wipe.
If you are worried about your data, either phone is good (don't unlock bootloader and don't oem unlock). If you are worried about the hardware, you are responsible for that.
dbrohrer said:
I concur with @Large Hadron
On an iPhone, someone could enter the password incorrectly several times and the device would be wiped. It would not be usable, but it would be wiped. They could also connect the iPhone to a computer / mac with itunes and flash a factory image from there. Again, the device would be useless to them, but you wouldn't be able to recover your device from the thief.
Comparing an iPhone to a Pixel 1 or 2, both device could easily have the data wiped from the device. To that effect, the data is secure on both devices, which is by far the most important part. Recovering your lost / stolen device is an entirely different conversation. The benefit of an iPhone when lost / stolen is the device is a brick without the previous user's icloud email and password. Once it boots up, it asks for this before you can setup the phone. There is no way around this (without Apple's intervention). On a Pixel 1 or 2, the device could be wiped, but I believe the thief could then use the phone as their own. There is nothing that would "brick" the phone after a full data wipe.
If you are worried about your data, either phone is good (don't unlock bootloader and don't oem unlock). If you are worried about the hardware, you are responsible for that.
Click to expand...
Click to collapse
An Android phone works exactly the same way. If you wipe it from recovery, FRP (factory reset protection) kicks in, Once that happens, you are required to log on to the last account that the phone was used on (just like Apple). If you don't know the previous account and or password, there's no way you can use the phone.
You can factory reset from settings without triggering FRP though. Doing so removes all accounts from the phone and anybody can then use it. It's assumed since you are in settings, you've already logged on when you last booted the phone. A thief wouldn't be able to get into settings to reset it as he or she wouldn't know the password to unlock the phone.
robocuff said:
An Android phone works exactly the same way. If you wipe it from recovery, FRP (factory reset protection) kicks in, Once that happens, you are required to log on to the last account that the phone was used on (just like Apple). If you don't know the previous account and or password, there's no way you can use the phone.
You can factory reset from settings without triggering FRP though. Doing so removes all accounts from the phone and anybody can then use it. It's assumed since you are in settings, you've already logged on when you last booted the phone. A thief wouldn't be able to get into settings to reset it as he or she wouldn't know the password to unlock the phone.
Click to expand...
Click to collapse
Cool. I didn't know that. Thanks for that info
dbrohrer said:
Cool. I didn't know that. Thanks for that info
Click to expand...
Click to collapse
And if you really want to perfectly protect all your encrypted files, never open the bootloader. Because there's no way to flash something in the phone if the bootloader is closed. And there's no way to Open the bootloader without wiping all your personal data in the process.
Now if you decide to open the bootloader, files are still encrypted, so it's not a big deal.
Regarding the annulment of an Android device, when it is stealed: That happens with any modern Android phone. Basically, Google bans the phone from their cloud servers. A phone without google account is like an iPhone without Apple/iCloud accounts, almost useless.
P.S.: an open bootloader in Android is like a Jailbreak in iOS, but totally OFFICIAL and supported by Google/Android. You don't lose any functionality like with Jailbreak (if that thing still exist today...).
From my point of view, Google should ask PIN before accessing Fastboot mode and Recovery mode. but this is just to prevent a bad joke from a friend or something like that. (Not when your phone is lost forever, you just want to ban that device from Google servers so can't be used again).
robocuff said:
An Android phone works exactly the same way. If you wipe it from recovery, FRP (factory reset protection) kicks in, Once that happens, you are required to log on to the last account that the phone was used on (just like Apple). If you don't know the previous account and or password, there's no way you can use the phone.
You can factory reset from settings without triggering FRP though. Doing so removes all accounts from the phone and anybody can then use it. It's assumed since you are in settings, you've already logged on when you last booted the phone. A thief wouldn't be able to get into settings to reset it as he or she wouldn't know the password to unlock the phone.
Click to expand...
Click to collapse
Are you sure about that? I believe that factory reset still triggers FRP thus the black market trade in bypassing that check on lost and stolen devices.

Forgot phone password

Friend got into a fight with his brother. His brother was able to break into his phone.
Friend changed the password on the device last week, and because of his school, he doesn't take the phone with him.
He opened the phone today, and can't remember the password.
It is a Moto G7 Power, running Android 9
It has GenTech installed on the phone.
I do not know any specifics beyond that, as the settings are hidden behind a lock screen.
When I logged into the Google account, it looks like the account hasn't been backing up photos, contacts, etc since the GenTech was put on. iDrive also hasn't been backing anything up.
Are there any tools that can remove the lock screen? Preferably free, but I wouldn't mind paying a small amount. And NOT wipe the device.
Before coming here, I saw Eelphone, but it looked super shady.
Searching through XDA's forums, I saw Dr.Fone as an application as well.
Are these the best options? I mean, I troubleshoot devices for clients all the time, and thankfully haven't had to recover their devices like this, and I know that it has changed a lot since the beginnings of Android, but I need something in the toolbox for sure.
Any help is appreciated, thank you!
Edit: I thought I might try Dr.Fone on my Motorola device. Uh, not the right application that I need! I want the data preserved, not wiped. If I wanted the phone wiped, I'd have done it from the bootloader.
(Or do they make a copy of the device, wipe the phone, and reload everything minus the lock screen?)
(Or is Dr.Fone a malicious program masquerading as legitimate?)
DaNissNYC said:
Friend got into a fight with his brother. His brother was able to break into his phone.
Friend changed the password on the device last week, and because of his school, he doesn't take the phone with him.
He opened the phone today, and can't remember the password.
It is a Moto G7 Power, running Android 9
It has GenTech installed on the phone.
I do not know any specifics beyond that, as the settings are hidden behind a lock screen.
When I logged into the Google account, it looks like the account hasn't been backing up photos, contacts, etc since the GenTech was put on. iDrive also hasn't been backing anything up.
Are there any tools that can remove the lock screen? Preferably free, but I wouldn't mind paying a small amount. And NOT wipe the device.
Before coming here, I saw Eelphone, but it looked super shady.
Searching through XDA's forums, I saw Dr.Fone as an application as well.
Are these the best options? I mean, I troubleshoot devices for clients all the time, and thankfully haven't had to recover their devices like this, and I know that it has changed a lot since the beginnings of Android, but I need something in the toolbox for sure.
Any help is appreciated, thank you!
Edit: I thought I might try Dr.Fone on my Motorola device. Uh, not the right application that I need! I want the data preserved, not wiped. If I wanted the phone wiped, I'd have done it from the bootloader.
(Or do they make a copy of the device, wipe the phone, and reload everything minus the lock screen?)
(Or is Dr.Fone a malicious program masquerading as legitimate?)
Click to expand...
Click to collapse
Is the device rooted?
Does the device have USB debugging enabled in system settings?
If the answers to these questions are no, then all you can do is factory reset. After resetting, it will probably be FRP locked(Factory Reset Protection), which means you still need to remember the google account username and password to get logged into the device, but, the lockscreen pin/password will be removed. You'll lose the user's data in the process. At this point, if it isn't rooted or does not have USB debugging enabled, there aren't really any options to save their user data before resetting the device.
Sent from my SM-S767VL using Tapatalk
The phone is not rooted, unless the GenTech software gained the root access. (I am too new to post a direct link, but it is a monitoring program - I don't know how common it is outside of my community)
If I recall correctly, I did get access to developer options, but that was back in July - I'm not sure if I have developer options enabled at this time.
The paid softwares can't crack it? That really is too bad.

Categories

Resources