Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I was using Active Sync on my Android Galaxy S2 and as a result it enforced encryption of the phone and SD card. Phone did a factory resync and now data on SD card is still encrypted. Is there a way to recover the data off the SD card? Is the key required to decrypt the SD card stored on the card? Is there any external software I can use to recover the SD card contents?

share|improve this question
1  
Nope. You're pretty much screwed unless you kept a backup of your phone's settings, and even then it might not have backed up the storage key. –  Polynomial Feb 28 '13 at 0:44

3 Answers 3

You should not be able to recover the contents of the SD card if you've done a factory reset. It's designed that way and is a good thing as it protects data being read if your phone has been lost or stolen. Unfortunately for you in your situation, unless you have backups your data is lost.

share|improve this answer

There seems to be some debate over whether or not the SD card can be encrypted; Android did not support external media encryption when it was introduced, and the current state of that feature seems to vary significantly between the various versions of Android.

The most authoritative source I can seem to find is from a forum post (the author may be a Google Software Engineer:

2012/1/10 Marc Blank : The answer here is somewhat nuanced. ActiveSync can require that the device and/or sd card be encrypted, and we enforce those policies in ICS; however, ICS does not have the ability to encrypt removable storage (i.e. SD cards). So here's what happens:

1) In all current versions of ICS (up to 4.0.3), we accept the "encrypt device" requirement and reject the "encrypt sd card" in all cases (reject = we don't allow the account to be created/synced on device) 2) In the next update to ICS, we will also accept "encrypt sd card" if and only if the device is encrypted and it has no removable volumes (this is true of the Nexus S and Galaxy Nexus); on these devices, all internal storage is encrypted when device encryption is enabled.

Having said that, the Email/Exchange application never stores emails other than in internal storage; however, user can still choose to save attachment files to "sd card" (which may or may not be external) unless, of course, the ActiveSync policies are set up to disallow loading of attachments.

Does this make sense? Sorry if it's complicated, but ... that's how it is!

Marc

Having said that, in general I agree with the comment by Polynomial - it will probably be impossible to recover the contents of the SD card.

share|improve this answer

There is a good chance the encryption key is stored on the SD Card, but itself encrypted with your unlock password. Try encrypting your phone with the same unlock password as before, then inserting the SD Card.

share|improve this answer

protected by Community Jun 30 at 20:33

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.