By warsong


2015-01-17 20:21:41 8 Comments

There is a semi-relevant thread on SO https://stackoverflow.com/questions/12640708/check-if-android-filesystem-is-encrypted that explains how a developer would determine if full-disk encryption is enabled, but is there an easy way for a user to know? I tried encrypting (I'm on 4.4.2) and it seemed to fail at some point but did not throw an error, just dropped me back to the homescreen at a certain point.

4 comments

@blade 2018-05-30 07:51:21

The best way to tell if your Android device is encrypted (and the encryption is actually in use) is to reboot it and see if it asks for a password/PIN with a prompt on a black screen that says:

To start Android, enter your PIN

If you're not seeing this prompt, then even though your device may be encrypted, the encryption is pretty much useless. This is because Android's encryption works in two steps:

  • your files* get encrypted with a 128-bit master key
  • the master key is either encrypted with your password or just stored as is

The lack of prompt means the master key is not encrypted (or your device is not encrypted at all) and your data could be read by anyone who manages to boot a recovery image on your device such as TWRP.

To enable the encryption (enabled by default on devices shipped with 5.0+) go to Settings > Security & location > Encryption & credentials > Encrypt phone.

But to actually have the master key encrypted and your files inaccessible without a password, you need to go to Settings > Security & location > Screen lock > PIN or Password and tap Yes when it asks if you want to use Secure start-up.

This is how settings look like on Oreo, other versions may be different, but the settings you're looking for should be pretty much the same.


*7.0+ encrypts files, Android 5.0 - 6.x encrypts partitions (source)

@beeshyams 2018-01-03 16:34:51

On Oreo 8.0.0

Settings → Security & Location → Encryption & Credentials & it shows phone encrypted

Better method

Using command adb shell getprop ro.crypto.state ( works on unrooted devices also) returns encrypted or unencrypted

Output examples

  • Oreo ( Unrooted, encrypted)

Vostro1510 ~ $ adb shell getprop ro.crypto.state

encrypted

  • Marshmallow ( Rooted, unencrypted)

Vostro1510 ~ $ adb shell getprop ro.crypto.state

unencrypted

Source - Adb command to check if the device is encrypted

Note : Original question refers to Full Disk Encryption which has been replaced by File encryption from Nougat onwards. See this for details

Edit Instead of adb you can install Termux and type getprop ro.crypto.state to get the result - works on unrooted device also

@Firelord 2019-03-01 15:07:38

+1. Is there a way to know if the device uses full-disk encryption or file based encryption?

@beeshyams 2019-03-01 15:55:02

@Firelord Thanks. Yes, we have an answer here android.stackexchange.com/q/195713

@tworec 2017-05-17 17:14:00

Try changeing default storage to SD Card

Settings -> Memory -> Default Location -> SD Card

if your phone is encrypted than you'll get a warning stating that internal memory is encrypted. Of course its only a hint, not a proof.

My P9 Lite (Android 7) behaves like that, and this is consistent with user guide page 193

Full-disk encryption | All data on the memory chipset is automatically encrypted

@Lutz Prechelt 2015-03-14 19:32:51

Same place where you start the encryption:

In (I am on 4.3) Settings -> Options -> Security, the first entry will report the status and offer decrypt (if encrypted) or encrypt (if not).

@warsong 2016-08-27 12:07:59

I could be wrong but isn't there a difference between FDE and system encryption? I think the one you mention is only system level.

Related Questions

Sponsored Content

1 Answered Questions

1 Answered Questions

2 Answered Questions

[SOLVED] Encryt a single user, not the whole device

  • 2015-07-05 11:47:04
  • ctrl-alt-delor
  • 66 View
  • 1 Score
  • 2 Answer
  • Tags:   encryption

1 Answered Questions

4 Answered Questions

[SOLVED] Is there any WEP cracking application available for android?

1 Answered Questions

1 Answered Questions

[SOLVED] Turning on encryption for an Android 4.0 device

Sponsored Content