Tweeted twitter.com/StackSecurity/status/716023936211894273
2 added 371 characters in body
source | link

I am using Android 4.4.4. There is an option called phone storage encryption.

From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: http://thehackernews.com/2016/03/unlock-google-android.html

How can I prevent google from getting my encryption keys?! I am kind of shocked by the article.

I also read: "In other words, unlike Apple, Google has technical abilities to reset device passcode for about 74% of Android users (~Billions) running all versions older than Android 5.0 Lollipop that does not have full disk encryption."

If the above is true, what is the difference between full disk encryption and phone storage encryption which I am using?

Thank you!

EDIT - In response to comments: My phone is HTC Desire 620. Under settings, storage I have two options: - Phone storage encryption = Protect content on this phone with a password. - Encrypt SD card content = Help prevent other phone from accessing this CD card.

The phone storage encryption to me seems like full disk encryption, so is the article very wrong?

I am using Android 4.4.4. There is an option called phone storage encryption.

From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: http://thehackernews.com/2016/03/unlock-google-android.html

How can I prevent google from getting my encryption keys?! I am kind of shocked by the article.

I also read: "In other words, unlike Apple, Google has technical abilities to reset device passcode for about 74% of Android users (~Billions) running all versions older than Android 5.0 Lollipop that does not have full disk encryption."

If the above is true, what is the difference between full disk encryption and phone storage encryption which I am using?

Thank you!

I am using Android 4.4.4. There is an option called phone storage encryption.

From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: http://thehackernews.com/2016/03/unlock-google-android.html

How can I prevent google from getting my encryption keys?! I am kind of shocked by the article.

I also read: "In other words, unlike Apple, Google has technical abilities to reset device passcode for about 74% of Android users (~Billions) running all versions older than Android 5.0 Lollipop that does not have full disk encryption."

If the above is true, what is the difference between full disk encryption and phone storage encryption which I am using?

Thank you!

EDIT - In response to comments: My phone is HTC Desire 620. Under settings, storage I have two options: - Phone storage encryption = Protect content on this phone with a password. - Encrypt SD card content = Help prevent other phone from accessing this CD card.

The phone storage encryption to me seems like full disk encryption, so is the article very wrong?

1
source | link

Android full disk encryption

I am using Android 4.4.4. There is an option called phone storage encryption.

From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: http://thehackernews.com/2016/03/unlock-google-android.html

How can I prevent google from getting my encryption keys?! I am kind of shocked by the article.

I also read: "In other words, unlike Apple, Google has technical abilities to reset device passcode for about 74% of Android users (~Billions) running all versions older than Android 5.0 Lollipop that does not have full disk encryption."

If the above is true, what is the difference between full disk encryption and phone storage encryption which I am using?

Thank you!