I would like to install my company's email and software to my HTC One. However, it needs us to encrypt the phone first.
From my understanding, there are no way to decrypt the phone other than wiping off the phone and starting from scratches.
Thus, I would like to know that in case later I dont want to use the company's software and flash another ROM, would I be able to do so?
I heard that after the phone is decrypted, data can not be read in the recovery mode. Hence, flashing ROM will not be probable.
Can anyone answer me on this issue? Thanks!
Related
Good morning droids,
I was looking around for info on the "phone storage encryption" option which requires a PIN when the phone is first powered on. This sounds nice conseridering the amount of information contained on our devices these days.
I think this is a stock HTC feature but I wasn't finding much in other forums. I'm currently running viper rom which has me wondering a few things:
Where in the boot process does it prompt for decrypt? Would you still be able to mount images from storage-- like does it prompt before the bootloader starts? would you still be able to use/nandroid/mount roms in a custom bootloader? Are there any recovery options? if it all goes to hell would I still beable to flash back to stock? Can encryption be undone after? My main concern has to do with when in the boot the storage is decrypted and how it affects the use/flashing of roms.
With all these questions I think the resounding common sense answer is "its just not worth the potential fallout." but I'll ask anyway...
Thoughts?
CarbolDroid said:
Good morning droids,
I was looking around for info on the "phone storage encryption" option which requires a PIN when the phone is first powered on. This sounds nice conseridering the amount of information contained on our devices these days.
I think this is a stock HTC feature but I wasn't finding much in other forums. I'm currently running viper rom which has me wondering a few things:
Where in the boot process does it prompt for decrypt? Would you still be able to mount images from storage-- like does it prompt before the bootloader starts? would you still be able to use/nandroid/mount roms in a custom bootloader? Are there any recovery options? if it all goes to hell would I still beable to flash back to stock? Can encryption be undone after? My main concern has to do with when in the boot the storage is decrypted and how it affects the use/flashing of roms.
With all these questions I think the resounding common sense answer is "its just not worth the potential fallout." but I'll ask anyway...
Thoughts?
Click to expand...
Click to collapse
I don't believe that recoveries are able to update a phone with an encrypted data partition unless you're using stock. I do believe you can flash back to stock if something goes wrong, although you would certainly have to format /data to get back into it. However, the actual login process (if I remember correctly, it's been a while) is that the bootloader starts you in a "dummy" environment of sorts that just asks you for your password. If it checks out, the system reboots, passing that key on to the "real" operating system which decrypts the data volume.
I'd echo though that it's really not something you should fool around with.
Hey guys i wasn't real sure where to ask this but its very important to me that i figure this out.
i have a sm-g900a and i successfully rooted the phone. i never installed bootstrap or any custom recovery mod because i didn't get that far yet. i haven't put a rom on the phone either. i recently have been put in a situation where i need to encrypt my data, remove the data and wipe it clean so that absolutely no data can be recovered. this of course i know is hard to do without destroying the memory itself haha i just need to figure out how to get as close as possible to non recoverable data as possible. now for most encryption would suffice but my encryption program is not working so i need to fix that. this being said. data encryption can be decrypted if the password is found somewhere on the system. is there a way for me to delete the data and its residue off my phone so that it is not recoverable.
Hello!
I have a question, I tried too much ROMs, and now I decide to keep my Stock ROM with a Custom Kernel, like:
Stock ROM: http://forum.xda-developers.com/moto-x/development/rom-firmware-stock-brasil-4-4-4-zip-t2873516
Kernel: http://forum.xda-developers.com/moto-x/development/kernel-zwliew-kernel-r1-t2926315
And for security things, I have bought a Kaspersky Licence to track, block and wipe data, with SMS or WEB commands. But if I got stoled, and the thief knows how to get in the Recovery Mode, he will wipe the ROM and get access to my data in the same way, without the Kaspersky tool.
So I have a question, is there any way to block the bootloader and block the recovery?
I don't have the answers but I can probably give you some good questions to ask.
I don't imagine there's any way to "block the bootloader" if that's what you really meant to type.
First thing you might want to do is flash the stock recovery. You won't be able to flash custom things with it but you can't do much else in stock recovery like you can in a custom one.
If you did want to make changes which required a custom recovery you could already just flash one. Granted, a tech savvy thief could always do the same if they realized that you're unlocked but that would probably weed out the average opportunistic pretty thief.
### There may be risks to this that I don't know but if you wanted to take it a step further I WOULD THINK you could even relock the bootloader. I unlocked via the China middleman so I have my unlock code to use/reuse whenever I want. I think I recall hearing that sunshine will also relock and reunlock the same phone once purchased for that phone? What I don't know is if there's any risk to locking a bootloader with a non stock system.
###
marcelorepavan said:
Hello!
I have a question, I tried too much ROMs, and now I decide to keep my Stock ROM with a Custom Kernel, like:
Stock ROM: http://forum.xda-developers.com/moto-x/development/rom-firmware-stock-brasil-4-4-4-zip-t2873516
Kernel: http://forum.xda-developers.com/moto-x/development/kernel-zwliew-kernel-r1-t2926315
And for security things, I have bought a Kaspersky Licence to track, block and wipe data, with SMS or WEB commands. But if I got stoled, and the thief knows how to get in the Recovery Mode, he will wipe the ROM and get access to my data in the same way, without the Kaspersky tool.
So I have a question, is there any way to block the bootloader and block the recovery?
Click to expand...
Click to collapse
No.
There is no security with an unlocked boot!
One reason THEM don't want it.
See the Philz dev thread (search) for a discussion on this issue.
If you are concerned about security, then flashing a custom ROM/Kernel is the wrong thing to do. You should leave the phone stock, enable device encryption, and also have stock recovery and a locked bootloader.
aviwdoowks said:
No.
There is no security with an unlocked boot!
One reason THEM don't want it.
See the Philz dev thread (search) for a discussion on this issue.
Click to expand...
Click to collapse
But is there any way to lock again my phone? Before a custom ROM/Kernel installed?
Thanks!
marcelorepavan said:
But is there any way to lock again my phone? Before a custom ROM/Kernel installed?
Thanks!
Click to expand...
Click to collapse
No. Because recovery is always accessible.
You can lock your phone at any point, but that isn't going to make it any more secure if you are rooted and/or have a custom recovery installed.
Sent from my Moto X
imnuts said:
You can lock your phone at any point, but that isn't going to make it any more secure if you are rooted and/or have a custom recovery installed.
Sent from my Moto X
Click to expand...
Click to collapse
Hello! Another question!
If a thieft with experience in ROMs/Root and this things get a Normal Moto X Unrooted and Original and Stock. Its is possible he wipe the data, of course...but Its possible to him, get the phone rooted and wipe the data too.
I'm trying to say, a phone with root and unrooted is the same thing about security, because if the Thief have experience, he will do the same thing...a unrooted phone wipe will lost all the datas, a rooted wipe will keep photos and files, right?
Factory reset doesn't care if you're rooted or not. If the phone is locked, unlocking will wipe data. Rooted or not, a factory reset deletes everything. Stock recovery will wipe the emulated SD card as well, where custom recovery doesn't by default, though it still can if you want.
Being rooted makes it easier to pull the data off the phone, but just because one isn't rooted doesn't mean your data is safe.
Sent from my Moto X
Hi,
I have a Nexus 6 with a shattered screen, and just bought another one to replace it (exact same model, XT1103 32GB).
I want to make a Nandroid dump of the old device by booting into TWRP temporarily, then restoring the backup to the new phone using the same method. Both phones are bootloader unlocked and totally stock (latest Android update).
Is there anything in particular that I should watch out for? Which partitions should I not touch - a friend on another forum suggested that I should not touch EFS?
Cheers,
Su
If you restore the efs from one to the other you'll loose your imei number on the second one
needleyepoke
---------- Post added at 07:49 PM ---------- Previous post was at 07:47 PM ----------
I've cloned a Nexus 5 but I'm not sure if it's the same way.... P.S. of course your not supposed to do it unless you own both phones... From what I've been told
needleyepoke
Hi,
I don't want to mess about with the IMEI etc - I just want the same system settings, apps etc.
What partitions should I backup/restore? I guess just System, Data, Cache, Boot & Recovery should be enough?
Thanks,
Su
[edit] This seems to suggest just System, Data and Boot is ok - but is that all I need if I am restoring to another device?
Sumanji said:
Hi,
I don't want to mess about with the IMEI etc - I just want the same system settings, apps etc.
What partitions should I backup/restore? I guess just System, Data, Cache, Boot & Recovery should be enough?
Thanks,
Su
[edit] This seems to suggest just System, Data and Boot is ok - but is that all I need if I am restoring to another device?
Click to expand...
Click to collapse
Yes if they're on the same version. I cloned a 32 into a 64.
Ok I just tried this now, and it is not working...
The restore to the new device worked fine, but when I power up I get the "your device is corrupt screen" (which I think is normal if you use TWRP), but then after that it's just a blank screen...
The phone is still able to boot into bootloader and recovery (stock).
Any ideas what could have gone wrong please?
Thanks,
Suman
I think this might be something to do with encryption... when booting into TWRP the new phone still requires the encryption pin I set up from its original software....
Do I need to start again?
Ok, I flashed the new phone with the factory image and started again... this time, when I restore the backup it just hangs on the white Google logo screen...
Any help appreciated please!
Thanks,
Su
If your firs N6 was encrpted (default) there's no way to clone it. Android will generate different encryption keys etc.
Secure lockscreen is a big no-no too. With it, you can't even properly restore backup on the same device!
Trying to take the lazy way out is just asking for trouble. There are many things that can go wrong.
Also just a side note. Cloning devices is illegal, even if you own both devices. The was set by the cell phone cloning laws set up by the FCC.
Your best bet is just to reset it up from scratch.
zelendel said:
Trying to take the lazy way out is just asking for trouble. There are many things that can go wrong.
Also just a side note. Cloning devices is illegal, even if you own both devices. The was set by the cell phone cloning laws set up by the FCC.
Your best bet is just to reset it up from scratch.
Click to expand...
Click to collapse
Oh well,
I'm remembering what I did and I did not restore the Nandroid from Device A to Device B, I titanium Backup'd all the apps and moved them to TitaniumBackup folder on the new phone, restored from there.
For /sdcard/ I had to copy and paste it from one phone to the other...
I'm going to reply this to your reddit thread also.
Lawstorant said:
If your firs N6 was encrpted (default) there's no way to clone it. Android will generate different encryption keys etc.
Secure lockscreen is a big no-no too. With it, you can't even properly restore backup on the same device!
Click to expand...
Click to collapse
Ah dang, so there is no way for me to do what I want then... that's annoying, I would have bought a different phone in that case!
I believe Google requires encryption to be active in all devices with Android 6.0.1 installed, so any new device you purchase will have this (non-) issue.
Think of the alternative however. You could always be dealing with Samsung and Knox.
Strephon Alkhalikoi said:
I believe Google requires encryption to be active in all devices with Android 6.0.1 installed, so any new device you purchase will have this (non-) issue.
Think of the alternative however. You could always be dealing with Samsung and Knox.
Click to expand...
Click to collapse
I believe that is correct. All Nexus devices going forward will have the kernel force encryption. The only way around it is to format data in TWRP (completely wipe the phone) and then when you re setup your ROM (or even the stock image) just make sure you flash a custom kernel that doesn't force encryption (which pretty much all custom kernels don't) before booting into OS for the first time. I run mine unencrypted because nandroid backups are wayyyyy quicker without encryption. I know the security isn't as good but not a deal breaker for me.
I asked this question a while back when I was in the same situation, and was told that it's a bad idea.
TriguyRN said:
I asked this question a while back when I was in the same situation, and was told that it's a bad idea.
Click to expand...
Click to collapse
It is a bad idea. Restoring any system files from one device to another is a risky game. I wouldn't even recommend restoring data from one device to another.
Start fresh, clean. No need to bring junk over, or risk issues. Takes 15 minutes to setup a phone how I like it after a clean rom flash. That's not a long time.
Last year I returned my N6 because of the peeling-back problem. I had a full TWRP backup on my laptop. I loaded it on to the replacement N6, renamed the backup folder to the new device id, and restored it. Worked perfectly, no problems.
Running Pure Nexus which may not matter. Wife got mad and figured out my pattern lock to be nosey in my phone. She then decided to change to a password lock. I am now locked out. How can I reset my password without wiping my data? Android device manager knows it's locked so I can't use it to set a lock code. Saw a method using pc and adb to clear the password and reboot but not near my pc. Any way to use Twrp?
You SERIOUSLY can't get your wife to tell you the unlock code she put on it??? The only idea I have to get around it would to be dirty flash your current ROM over top of itself. This will retain your data and maybe/probably? take off the unlock code. On a side note, going forward I think you guys really need to work on trust and boundaries...
Hi,
Sorry to hear that happened to you. I have faced this issue before when I accidentally choose the pattern lock and forgot what it was. Could you tell me what ROM and android version you are running. The kernel also matters because if it has encryption enabled by default, the TWRP recovery would also need the same pattern/PIN for you to get in there to flash it. I guess my only other solution would be to use the Nexus Toolkit and try dirty flashing if you're running a custom ROM or checking the 'no wipe data' when flashing the official Google image.
Have a great new year!
Love,
Syed
I decided to just wipe and flash a new ROM. Took the opportunity to update to Pure Nexus Nougat. I'm still setting online accounts back up which is part of what I wanted to avoid. I really dislike not being automatically logged in to pay my bills!
knightjs1 said:
I decided to just wipe and flash a new ROM. Took the opportunity to update to Pure Nexus Nougat. I'm still setting online accounts back up which is part of what I wanted to avoid. I really dislike not being automatically logged in to pay my bills!
Click to expand...
Click to collapse
Wow paying your bills on a device with root and an unlocked bootloader. You surely are brave.
As for your issue well to be honest you have bigger issues then your device.
Thread closed