Google was the first to allow Android devices to be encrypted in Android Gingerbread (2.3.x), but this feature has undergone some significant changes since then. On some smartphones running lollipop (5.X) and higher, you can use the encryption function, as they say, out of the box, while on some older or budget devices you will have to enable it yourself.
Why you might need to encrypt your Android device
Encryption stores your phone data in an unreadable form. To perform low-level encryption functions, Android uses dm-crypt, which is the standard disk encryption system in the Linux kernel. This same technology is used in various Linux distributions. When you enter your PIN, password, or pattern on the lock screen, your phone decrypts the data to make it understandable. Those who do not know the PIN code or password will not be able to access your data. On Android 5.1 and above, encryption does not require a PIN or password, but is highly recommended as otherwise it will reduce the encryption performance.
Encryption protects sensitive data on your phone. For example, corporations with sensitive business data on their phones want to use encryption (with a secure screen lock) to protect the data from industrial espionage. An attacker would not be able to gain access to data without an encryption key, although there are advanced hacking methods that make this possible.
The average user thinks that he does not have any important information. If your phone is stolen, the thief will have access to your mail, be able to find out your home address and have access to other personal information. I agree that most thieves will not be able to access personal information if a regular unlock code is installed on the smartphone, even without encryption. And most thieves are interested in selling your device, not personal data. But it never hurts to protect your data.
What you need to know before encrypting your Android device
Most new devices have encryption enabled by default. If you have just such a device, then you will not be able to disable encryption. But, if you are using a gadget in which encryption is not enabled, then before using this function, you should know about the following:
- Slower work: Once the data has been encrypted, it will need to be decrypted every time the data needs to be accessed. Therefore, you may see a slight drop in performance, although this is not noticeable at all for most users (especially if you have a powerful phone).
- Disable encryption: If you turn on encryption, the only way to turn it off is to reset it to factory settings.
- If the device has root rights, then they need to be removed: If you try to encrypt an Android device that has superuser rights, then you will face some problems. You need to remove root rights first, encrypt the device and get superuser rights again.
This does not mean that we dissuade you from encryption, we are trying to explain all the nuances of this process.
How to enable encryption on Android
Before you get started, there are a few things to know:
- It may take an hour or more to encrypt your device.
- The device must be at least 80% charged, otherwise Android simply won't perform the encryption process.
- Your device must be turned on during the entire process.
- If the device is rooted, be sure to remove it before proceeding!
Make sure you have enough time and battery power. If you interfere with the encryption process or complete the process yourself, then you you may lose all data... Once the process begins, it's best to just leave the device alone and let it do its thing.
Open the menu, go to settings and click on "Security". Please note that this item may have different names on different devices. Some devices also allow you to encrypt the SD card, but by default only the internal memory is encrypted.
If the device is not yet encrypted, you can click on the "Encrypt device" item to start the encryption process.
There will be a warning on the next screen so you know what to expect after the process ends. Most have already been described in this article. If you are ready to proceed, click the "Encrypt device" button.
Another warning will appear asking if you really want to encrypt the device. If you haven't changed your mind, then click on "Encrypt device".
The phone will then reboot and the encryption process will begin. The progress bar and the time until the completion of the operation will show how much you will be without your phone.
After the end of the process, the phone will reboot and you can use it again. You will need to enter your screen unlock password or PIN to complete the boot process. If you have not enabled a password or unlock PIN, the system will prompt you to set them before encrypting your Android device. To do this, go to Settings -> Security -> Screen lock and select the type of lock.
Please note that if you have a fingerprint scanner installed, then you still need to set a password, PIN-code, or pattern, since they can be used to unlock the device at the first boot.
From now on, your device will be encrypted, but if you want to disable encryption, you can do so by performing a factory reset. If you have encryption turned on "out of the box", then you can no longer turn it off, even after resetting to factory settings.
The recent debate in the United States between law enforcement and tech giants over smartphone encryption is once again putting this issue in the spotlight. No one would argue that protecting your privacy is important, so we're happy to inform you that Android offers the tools you need to encrypt your smartphone right out of the box. If you are interested and want to know where to start, this guide will show you how to encrypt your Android smartphone or tablet.
Device encryption and what does it do?
Before encrypting your device, it makes sense to understand what encryption is, what are the pros and cons of this solution.
Device encryption is not a universal solution to protect all of your data or information from prying eyes, especially when sent over the Internet. Instead, device encryption converts all data stored on the phone into a readable form only with the correct credentials. This solution provides better protection than password lock, since data can be obtained without going through the screen lock using recovery programs, bootloaders or the Android Debug Bridge.
Encrypted music, photos, apps and credentials cannot be read without first decrypting the information, which requires a unique key. Thus, part of the procedure takes place behind the scenes, where the user's password is converted into a key that is stored in the "Trusted Environment" to remain inaccessible to third-party users in the event of a software attack. This key is required to encrypt and decrypt files.
In Android, encryption is simple from the user's point of view, since you enter your passcode every time you unlock the device, which makes your files available. This means that if your phone falls into the wrong hands, no one else will be able to parse the data on your phone without knowing the password.
And before diving headlong into encryption, there are a few points you should consider. First, opening encrypted files requires additional processing power, so encryption will affect the performance of your phone. Memory reads can get significantly slower on older devices, but the performance degradation in the vast majority of regular tasks remains very minor, if not noticeable.
Secondly, only a few smartphones will offer the option to remove encryption from your smartphone. Encryption is a one-way solution for most smartphones and tablets. If your phone does not offer the ability to decrypt the entire phone, the only option to perform a full rollback is to revert to factory settings, which will delete all of your personal data. Check this point in advance.
With the situation clear, let's see how to enable encryption.
Encrypting my device
Device encryption works the same on all Android devices, although how it is implemented may change slightly over time. Some devices come with active encryption out of the box, such as the Nexus 6 and Nexus 9, and if your device is not encrypted, it's very easy to do it with Android.
Android 5.0 or higher ...
For Android smartphones and tablets running Android 5.0 or later, you can go to the Security menu under Settings. The path here may vary slightly depending on your OEM, but with pure Android you will find encryption under Settings> Personal> Security.
Here you should see an option for "Encrypt Phone" or "Encrypt Tablet". You will be prompted to connect the device to a charger while encryption is in progress, to make sure the smartphone does not turn off in the process, which will result in errors. If you have not already done so, you will be prompted to set a screen lock PIN or password, which you will need to enter when you turn on your smartphone in order to access your encrypted files. Be sure to remember your password!
Android 4.4 and older ...
If you are using a smartphone with Android 4.4 KitKat or older, you must set a PIN or password before starting the encryption process. Luckily, it's not hard, go to Settings> Security> Screen Lock. Here you will be able to either choose a pattern, dial a PIN or a mixed password to lock the screen. You will use the same password after encryption, so pay attention to it.
When you're done with that, you can go back to the Security menu and click "Encrypt Phone". You will need to plug the device into a charger and read the warning messages, you will almost always have to confirm your PIN or password one last time in order for the encryption process to begin.
It can take an hour or more to encrypt your phone, depending on how powerful your smartphone is and the amount of data stored on your device. After the process is finally completed, you can enter your PIN and continue working with the encrypted device as if nothing had happened.
Back in the Security menu, you'll also likely learn about the option to encrypt files on your MicroSD card. This is a recommended step if you want to keep all your data safe, but not really necessary if you only use MicroSD to store music or movies that have no personal value.
Several caveats come with this solution. Firstly, you will no longer be able to use MicroSD cards with other devices without completely removing the encrypted data, since other computers / devices will not know the encryption key. While an encrypted MicroSD card can still be used to move files, this will only last as long as you access the encrypted files from the phone used to encrypt them. In addition, if you reset your device before decrypting files, the key will be lost and you will not be able to access protected files on the MicroSD card. So think carefully about the situation.
When you're done ...
That's all it really takes to encrypt an Android device. This is a great way to protect your data much more securely. There is a minor trade-off in terms of performance, but any differences should be very difficult to spot on modern mobile phones.
Additional options with third-party applications
If you don't want to go through the encryption rink of all your device's data, there are a handful of Android apps in the Google Play store that offer a variety of selective features, including encrypting a single file, text, or folder.
SSE - Universal Encryption Application
version: 1.7.0 (Pro) (Downloads: 179)
SSE has been in this market for a very long time and still seems to be receiving small updates. Instead of implementing bulk encryption on your phone, SSE can be used to protect and decrypt individual files or directories that you need if you want to selectively protect multiple items. You can set a password that will serve as the decryption key, there is also the ability to create encrypted copies of files or completely replace them.
The app also has a text encryptor and password storage. A text editor can be used to store encrypted notes that can be shared across platforms. The vault is designed to store and manage all passwords, PINs and notes in one secure location, protected by a master password. The feature works similar to LastPass.
Final thoughts
With the amount of sensitive personal information we hold on our mobile devices today, including bank details, encrypting Android devices is becoming a smart solution. There are quite a few options that provide varying levels of security, from Android's broad encryption system to file-specific encryption apps. Keep in mind, encryption doesn't provide complete protection against everything, but it does offer excellent protection in the event of device theft.
Why prepare your device for theft or loss
Loss or theft is always a surprise. By preparing your device in advance, if you lose it, you can:
Protect your personal data (for example, photos) from strangers;
Track the location of the device;
Prevent anyone who finds or stole your device from using your device.
Step one: lock the screen
Why
If the screen is locked, the device cannot be used or viewed. To view photos, read SMS or do anything with the device, you need to know the password or pin code.
Open “Settings” → “Lock screen and security” → “Screen lock type” or “Screen lock” → Set a lock. We recommend using a password (numbers and letters) or a PIN code (at least five digits). If your device has a fingerprint sensor or an iris scanner, you can use them.
Now, every time you turn on the screen, you need to unlock it.
Step two: encrypt the memory card
Why
If you store important files on the card, encryption protects them - they will only be read on the device where the card was encrypted.
If there are no important files on the memory card, or there is no card in the device, you do not need to encrypt it.
Open Settings → Biometrics & Security, Security or Lock Screen & Security → Encrypt SD Card (Encrypt External Memory Card) → Encrypt SD Memory Card or Encrypt External Memory Card → Encryption will start.
Now if you insert the card into another device (laptop, smartphone ...), the files cannot be read.
Step three: enable the PIN code request on the SIM card
Why
No one will be able to call or send SMS from your SIM card until they enter the correct PIN code. If the PIN code is entered incorrectly three times, the SIM card will be blocked.
In most cases, the PIN code request is disabled on the SIM card. To enable it, you need to know the current pin code. The current pin-code is indicated on the plastic card into which the SIM-card is pasted upon purchase.
If you do not know the current PIN code, replace the SIM card with the operator. The number will remain old, but the PIN code will be new.
Open “Settings” → “Biometric data and security”, “Security” or “Lock screen and protection” → “SIM card lock” or “Other security settings” → “Configure SIM card lock” → Turn on the lock and change the pin more complex code.
Now, when you turn on the device, you will need to enter the PIN code from the SIM card.
From a security perspective, your Android smartphone is a compact box full of important personal information, and you would hardly want it to fall into the wrong hands. For a more realistic picture of the situation, think about your e-mail, SMS messages, saved credit card numbers, personal photos and other sensitive data.
I think no one would like to be in a situation where a stranger would take possession of this data, because it’s even scary to think about the consequences of this. And this is the main reason why we come to different methods of organizing the protection of our phone or tablet, and data encryption is the main means of protecting data.
What is encryption?
Encryption is the reversible process of converting data into an unreadable form for all persons except those who know how to decrypt it. The only way to get the data back into readable form is to decrypt it back with the correct key.
Such things are easier to understand with simple examples, let's say you lost your diary, and the one who finds it and knows Russian can easily read and find out your innermost secrets, but if you kept a diary in some kind of secret code, or in a language that only you understand, no one else could read it.
A similar approach can be applied to data stored on your Android device. A thief can take over your smartphone or tablet and gain access to personal data, but if the data is encrypted, then it will be just a set of useless gibberish that he cannot read.
We encrypt your Android
Android encryption is a very simple procedure. Please note that the encryption menus may be in different places on different devices. In addition, custom firmware and UI, such as Samsung TouchWiz UX, may have different requirements.
The first step is to set a password or PIN to lock the screen. This password or PIN will form part of the decryption key, so it is important to set it before starting encryption.
Some device manufacturers have additional security requirements, such as the Galaxy S3 and Galaxy S4.
After setting the PIN or password, go to the subsection of the main menu “Security” and select “Encrypt Phone” or “Encrypt Tablet” (Encrypt Phone or Encrypt Tablet). The encryption menu may appear in different places on different devices, for example, on HTC One, it's under Storage in the main menu.
The encryption menu will look something like this:
The encryption process takes a long time, so it is important that your battery is fully charged. If the battery power is insufficient, you will receive a notification before starting encryption.
When you are ready, click the button at the bottom of the screen “Encrypt Phone” or “Encrypt Tablet” (Encrypt Phone or Encrypt Tablet). Here your phone will ask for a password or PIN code, enter it to confirm. The warning message will appear again, click the “Encrypt phone” button.
Your device will reboot and only after that encryption will start. You will see an encryption progress indicator on the screen. While the encryption process is running, do not play with your phone and do not try to perform any actions, if you interrupt the encryption process, you may lose all or part of the data.
Once the encryption is over, the phone (tablet) will reboot and you will need to enter a password or PIN to decrypt all data. After entering the password, all data will be decrypted and normal Android will boot.
External SD card encryption
Some devices, such as Galaxy S3 and Galaxy S4, allow data encryption even on external storage - SD memory cards.
Google introduced full data encryption on a phone running Android Gingerbread (2.3.x), but it has undergone some drastic changes since then. as on some of the more expensive phones running Lollipop (5.x) and above, it is enabled natively, while on some older or earlier devices you have to enable it yourself. You can read how to encrypt flash drives.
Why you might want to encrypt your phone
Encryption stores your phone data in an unreadable, almost encrypted form. (In order to actually perform low-level encryption functions, Android uses DM-crypt, which is the standard disk encryption system in the Linux kernel. This is the same technology used by various Linux distributions.) When entering a PIN, password, or picture on the lock screen, the phone decrypts the data, making it readable. If someone does not know the PIN or password, they will not be able to access the data. (On Android 5.1 and up, encryption does not require a PIN or password to be set, but is highly recommended as without a PIN or password, encryption performance is reduced.)
Data encryption protects sensitive data on your phone. For example, corporations with sensitive business data on their phones will need to use encryption (with a screen lock) to protect that data from corporate espionage. An attacker would not be able to access the data without the encryption key, although there are more advanced cracking methods that make this possible.
If you are a regular user, you may think that you do not have sensitive data on your phone, but you are probably wrong. If your phone is stolen, the thief now has access to your email inbox, knows your home address, and a lot of other personal information. Most thieves will not access data with a standard unlock code, whether the device is encrypted or not. Most thieves are more interested in selling your phone (resetting your data) than accessing your personal data. But, this does not mean that you do not need to protect your data.
Things to Consider Before Enabling Encryption
Most newer Android phones come with encryption already enabled by default. If this is the case with your phone, then there is no way to turn off encryption. But if you are using a device where encryption is not enabled by default, then there are some things to consider before enabling it:
Deteriorating performance: Once you turn on the encryption feature, the data will need to be decrypted on the fly every time you unlock your phone. Thus, you may notice a slight drop in performance when it is on, although this is not noticeable at all to most users (especially if you have a powerful phone).
Encryption of existing data can be enabled once: If you have enabled encryption, the only way to disable encryption is to reset the device to factory settings and all data will be lost. So make sure you are confident that you are ready for this before starting the process.
The next screen will present a warning so you know what to expect once the process is complete, most of which we've already covered in this article. If you are ready to proceed, click the "encrypt phone" button.
One more warning (seriously, we want to make sure you understand what you are about to do), in any case, do not interrupt the process. If you are still not scared, then click on the "" button and start the process.
The phone will reboot and start the encryption process. A progress bar and estimated time to completion will be shown on the display, this should at least give an idea of how long you will be without your beloved phone. Just expect everything to be okay soon. You can do it. You are strong.
After the phone finishes the process, it will reboot and you will be together again. If you have set up a screen lock password, PIN, or pattern, you must enter it into the system and the device will complete the power-on process.
If you haven't set a PIN or password, now is the time to do so. Head to Settings> Security on your device. Next, select the 'Lock Screen' option (keep in mind that the name of the menu items may vary slightly for different Android phones, and even for the Samsung Galaxy line of devices).
