Hi all,
My problem is the following: my phone's screen is dead, the phone has full disk encryption turned on, I know the password, I need to retrieve data on it and I have an encrypted back up.
The phone is a Samsung Galaxy S7. I cannot access files by plugging the phone into my computer as I can't unlock the phone without the help of the screen. USB debugging is not enabled.
I have a recent backup of the files made with Samsung's Smart Switch. However, all apk files as well as most files are saved as "enc." files and not readable decrypted files.
I have tried using gpg and openssl tools to decrypt those files individually with the FDE password of the phone without any success.
What are my options to A) either access my phone's content without the use of the screen B) or decrypt those encrypted backed up files I have given that I know the phone's password?
Thanks
Related
Hello !!
I have Samsung Galaxy S3 Korean SHL-E210L. I encrypted my internal storage memory unintentionally without knowing what encryption actually means. When the process started, i restarted my phone in order to stop the process. But the same window appeared again and I was forced to complete the process. When the phone again started, all my data was lost and the phone was like brand new. No password was set up on the mobile ( as the encryption always needs a password to start) and I could start it without a password but still I was not able to view any of my files. I received no error of wiping of data or failure of encryption. Kindly guide me how to open or view the encrypted data? Have I lost it? How can I confirm that the data was actually encrypted or not?
Hello,
I unexpectedly had to do a factory reset on my S7 while the SD card was encrypted, as result the SD was not obviously readable afterward.
I saved part of the encrypted content of the SD card (basically the pictures) before formatting it and starting using it again, however I'm not able to recover this content.
I tried with the procedure I found on internet:
- saving the encrypted data
- format the SD card
- encrypt of it
- copy of the saved content back to the SD
- decrypt
However, at the decrypt state the phone don't move from an 'Analyzing SD card' phase.
Any idea? I'm afraid I should have saved all the content of the SD card...
Thank you
You should plug the SD card on to your PC using an SD Card reader. Open up CMD, and type diskpart.
After which, type list volume, and you will see the "drive letter" of your SD Card, type clean and afterwards...
Proceed to typing create partition primary size = "insert capacity of SD card here (mb" *w/o the quotation marks*
After which, type assign letter=F
It should work fine after this hopefully.
When you encrypt the SD card, Android makes a unique key that is stored in the Android trust store. When you factory reset the device, that key is lost. Permanently. Remember, the whole point of encryption is so malicious parties cannot access your data. If you could just read it again after factory resetting then there isn't much point is there? Your only option is brute-forcing it.
Always backup. Always.
CurtisMJ said:
When you encrypt the SD card, Android makes a unique key that is stored in the Android trust store. When you factory reset the device, that key is lost. Permanently. Remember, the whole point of encryption is so malicious parties cannot access your data. If you could just read it again after factory resetting then there isn't much point is there? Your only option is brute-forcing it.
Always backup. Always.
Click to expand...
Click to collapse
Thank you
I do have a backup, however it was more convenient to restore the 20GB of photos from the SD rather than from the cloud.
I was reading some guides on internet with this procedure that's why I tried.
I will survive, thank you both for your answer
Mone181 said:
Thank you
I do have a backup, however it was more convenient to restore the 20GB of photos from the SD rather than from the cloud.
I was reading some guides on internet with this procedure that's why I tried.
I will survive, thank you both for your answer
Click to expand...
Click to collapse
If somehow it was possible to backup the encryption key which is generated randomly on each phone then it would be possible to decrypt it on your PC even if the phone was damaged using your password and encryption key. For some stupid reason this is not implemented in Android (but it was doable for some devices), for example TrueCrypt or Microsoft Bitlocker allow it.
difto said:
If somehow it was possible to backup the encryption key which is generated randomly on each phone then it would be possible to decrypt it on your PC even if the phone was damaged using your password and encryption key. For some stupid reason this is not implemented in Android (but it was doable for some devices), for example TrueCrypt or Microsoft Bitlocker allow it.
Click to expand...
Click to collapse
Yes, I thought the encryption was based on pin of the phone actually.
Lesson learned
Hello,
I have similar problem, but with Sony Xperia Z5 Compact. I made factory reset but didn't decrypt SD card before. SD card was ejected before reset, so I have all the datas, but cannot open them.
Is there any chance that I may recover my photos and videos if I don't have any backup?
Best regards.
Anyone?
Hi everyone
I kinda have the same problem. But the difference in my case is that I didn't reset the phone. While operating normally, one day it gave me a notification that encryption has failed. When I touched it, a page opened with the button of decrypt SD card at the bottom. I thought a restart would fix the issue. But when restarted, the contents of my SD cannot be accessed. I tried to decrypt it manually but in the settings, it thinks that the SD is unencrypted and only gives me the option to encrypt it, which obviously fails after every try. I was wondering if there is any way to trigger the decryption manually? Because I didn't reset the phone or anything and the data is still there. The phone just fails to see it.
Thanks in advance
Hey! I can confirm for 1000% the method you said worked for me:
- saving the encrypted data
- format the SD card
- encrypt of it
- copy of the saved content back to the SD
- decrypt
I deleted a video was able to retrieve it using Diskdigger on my pc. But then I was unable to open it because it was encrypted. So than I decrypted the SD in my phone only to find out the files were than unrecoverable deleted!?! Luckily I copied the files to my pc before decrypting!!! I used ur method and it worked decrypted it and everything played fine! Must say I was on the same os same phone(s8) so that must've been why it worked anyway still it worked. I'm happy, I acquired parental responsibility because of u?
I have made a similar stupid mistake I rooted my galaxy s8 and forgot to decrypt the SD card... now can anyone help me with the steps that I can fallow to decrypt the camera folder...
I to have a same problum ..
please any one find out the result of that data recover from encripted sd card from samsung a50
Hello! The display on my phone is damaged and I can not use it. I would like to save some files to the PC via USB cable but I can not access the files due to the lock password on the screen. It is not possible to free the screen so that the files are accessed on the PC. I have Cerberus installed with Root. Can I do anything to get this access?
I backed up with Cerberus but could not save PDF and other important files.
install twrp and boot into recovery,
and viola your able to view ur phone storage in pc.
So, my brother backed up my Samsung Galaxy S4 on his laptop about 3 years ago. Can't remember the program used. He gave me the backup file yesterday.
(I screenshotted the file name and attached it here titled " FILE BACKUP TITLE.PNG")
I edited the file, to a .exe. (eg “Samsung SM-G350E_20191001_103009.bak” delete the bak and write exe after the dot and press enter.) That way I can access everything through winrar. However all of the files are encrypted! We have no idea what the password is, what shall I do! (Attached the password screen in winrar titled " RAR.PNG")
It has 1000's of photos from 2014-2017, I have no idea on what to do. I've checked out brute forcing, but I wasn't sure how to do it.
Thanks.
AkiraPerera04 said:
So, my brother backed up my Samsung Galaxy S4 on his laptop about 3 years ago. Can't remember the program used. He gave me the backup file yesterday.
(I screenshotted the file name and attached it here titled " FILE BACKUP TITLE.PNG")
I edited the file, to a .exe. (eg “Samsung SM-G350E_20191001_103009.bak” delete the bak and write exe after the dot and press enter.) That way I can access everything through winrar. However all of the files are encrypted! We have no idea what the password is, what shall I do! (Attached the password screen in winrar titled " RAR.PNG")
It has 1000's of photos from 2014-2017, I have no idea on what to do. I've checked out brute forcing, but I wasn't sure how to do it.
Thanks.
Click to expand...
Click to collapse
What method was used to create the backup? It may require using the same tool that created it to decrypt it, but, without the password, you're pretty much screwed.
Whatever he used, it isn't the best way of backing up android devices. Methods typically used to backup/manage PC's are not suggested for android. ADB and custom recovery are the recommended methods of backing up android, you take your chances with any other method, as you have discovered.
For future reference, backing up your internal storage such as photos, videos and personal files doesn't require any special tools or methods, all you have to do is connect to PC, open your phones internal storage on PC and then copy all the folders there and save them on your PC in whatever folder you choose, no encryption is necessary. Then, all you have to do to retrieve data from that backup is open the folder containing the backup and everything will be there for you to copy/paste/move/open/delete the same as you can with any other file on PC.
Transferring data from that backup folder to a new device is as simple as connecting the new device to PC, opening the backup folder then copying everything in the folder then opening the internal storage of the new device on PC and then pasting the contents of the backup into the internal storage of the new device. It is virtually no different than copying files from one USB drive to another USB drive, you are just going it with phones instead of USB drives.
Sent from my SM-S767VL using Tapatalk
Droidriven said:
What method was used to create the backup? It may require using the same tool that created it to decrypt it, but, without the password, you're pretty much screwed.
Whatever he used, it isn't the best way of backing up android devices. Methods typically used to backup/manage PC's are not suggested for android. ADB and custom recovery are the recommended methods of backing up android, you take your chances with any other method, as you have discovered.
For future reference, backing up your internal storage such as photos, videos and personal files doesn't require any special tools or methods, all you have to do is connect to PC, open your phones internal storage on PC and then copy all the folders there and save them on your PC in whatever folder you choose, no encryption is necessary. Then, all you have to do to retrieve data from that backup is open the folder containing the backup and everything will be there for you to copy/paste/move/open/delete the same as you can with any other file on PC.
Transferring data from that backup folder to a new device is as simple as connecting the new device to PC, opening the backup folder then copying everything in the folder then opening the internal storage of the new device on PC and then pasting the contents of the backup into the internal storage of the new device. It is virtually no different than copying files from one USB drive to another USB drive, you are just going it with phones instead of USB drives.
Sent from my SM-S767VL using Tapatalk
Click to expand...
Click to collapse
Thanks for your response, I thought nobody was going to reply.
We can't remember. All I remember is that my custom rom s4 (android 4) was hooked up to our mac laptop. Then we backed it up using some kind of backup program. Then it was updated to android 8.
Yeah I understand now, but at the time we were fairly new to the whole android scene. I have an s7 edge now, I just back everything up on google photos and the regular cloud service. What should I do? I really want those files back.
Thanks.
Mod edit: Duplicate thread closed
Hello Guys,
Yesterday my phone (Samsung S7) fell and the screen and touchscreen is not working since then. Not surprised given that it is shuttered XD.
Anyway, I had an sd card in the phone with all the photos saved on it, without cloud backups. Not remembering that the card was encrypted, I have simply connected the phone to my pc and copy pasted all photos to a pc folder. The sd card has then been inserted into a new Samsung A20e and fast formatted.
My problem is that now I have all the photos on my desktop which are encrypted and can't be opened. As soon as I realized this I have removed the sd card from the A20e to avoid overwriting data in case it can be recovered.
I would gladly appreciate if any of you could tell me if there is a way to recover this data.
I can access the USB debugging mode on the S7 and navigate its files.
My inexperienced ideas were:
1. Is it possible to recover the encryption key from the files in the phone and then use this do de-encrypt the photos on the pc?
2. If I insert the sd card back into the S7, format it, encrypt it (through a pc screen mirrowing tool), copy the photos form the pc into the card would the phone be able to read them? This could be possible if the phone uses always the same encryption key without changing it.
3. Is there any use in trying to use one of those data recovery tools on the sd card? The data I would get will still be encrypted.
Thanks to anyone who'd be willing to help.
upuupupupup
Galbanino0 said:
Hello Guys,
Yesterday my phone (Samsung S7) fell and the screen and touchscreen is not working since then. Not surprised given that it is shuttered XD.
Anyway, I had an sd card in the phone with all the photos saved on it, without cloud backups. Not remembering that the card was encrypted, I have simply connected the phone to my pc and copy pasted all photos to a pc folder. The sd card has then been inserted into a new Samsung A20e and fast formatted.
My problem is that now I have all the photos on my desktop which are encrypted and can't be opened. As soon as I realized this I have removed the sd card from the A20e to avoid overwriting data in case it can be recovered.
I would gladly appreciate if any of you could tell me if there is a way to recover this data.
I can access the USB debugging mode on the S7 and navigate its files.
My inexperienced ideas were:
1. Is it possible to recover the encryption key from the files in the phone and then use this do de-encrypt the photos on the pc?
2. If I insert the sd card back into the S7, format it, encrypt it (through a pc screen mirrowing tool), copy the photos form the pc into the card would the phone be able to read them? This could be possible if the phone uses always the same encryption key without changing it.
3. Is there any use in trying to use one of those data recovery tools on the sd card? The data I would get will still be encrypted.
Thanks to anyone who'd be willing to help.
Click to expand...
Click to collapse
If it has been formatted, it is gone. Recovering data that has been deleted is quite possible. Recovering data that has been formatted is not likely. And even if you did manage to recover any of the data, it would be very fragmented and incomplete, in other words, there wouldn't be enough left behind to recover anything that is a complete or useable file, all you would have are incomplete pieces of files.
However, it is possible to decrypt your encrypted backup but I don't know the best method to do so.
I only posted to give you an idea of what is possible and what isn't.
Sent from my SM-S767VL using Tapatalk
Droidriven said:
If it has been formatted, it is gone. Recovering data that has been deleted is quite possible. Recovering data that has been formatted is not likely. And even if you did manage to recover any of the data, it would be very fragmented and incomplete, in other words, there wouldn't be enough left behind to recover anything that is a complete or useable file, all you would have are incomplete pieces of files.
However, it is possible to decrypt your encrypted backup but I don't know the best method to do so.
I only posted to give you an idea of what is possible and what isn't.
Sent from my SM-S767VL using Tapatalk
Click to expand...
Click to collapse
Thanks for the reply.
At least if you say that is possible to decrypt the files there is some hope for them. Have you got any idea of where I could understand more on how to do it?