How to decrypt? - OnePlus 3 Questions & Answers

Hello, just as the title says, how do you decrypt a stock op3?

Have a look HERE

LS.xD said:
Have a look HERE
Click to expand...
Click to collapse
Does flashing a CM based rom also decrypt the device? i read that somewhere?

DaarkieDoo said:
Does flashing a CM based rom also decrypt the device? i read that somewhere?
Click to expand...
Click to collapse
I think it's kernel related. Any custom kernel (I'm actually using Elemental X) should include the feature "doesn't force encryption".
BTW: Why do you need it decrypted?

LS.xD said:
I think it's kernel related. Any custom kernel (I'm actually using Elemental X) should include the feature "doesn't force encryption".
BTW: Why do you need it decrypted?
Click to expand...
Click to collapse
For MultiRom

Kernel
So if I flash a custom kernel over my stock rom kernel, it should disable encryption, or do I have to tell it not to?

Nothing will just disable encryption, this can't be done. In order to "decrypt" the device, you have to format data partition in fastboot mode (fastboot format userdata) - data and system loss obvious.
Then you need to have a custom kernel before first boot to keep the device decrypted, because OOS stock kernel will encrypt it again.
Sent from my OnePlus 3 using Tapatalk

Related

[Q]Nexus 6 PA and encryption

I was unencrypted on my previous stock ROM. I then flashed PA, I noticed that it has encrypted my device again which is no problem as I can unencrypt. So my question is this, If I stay unencrypted, will future OTA updates from PA always encrypt me ?
Encryption on nexus 6 is enabled by default. Yes you will probably be forced encrypted
#stayparanoid
Thanks for your reply, I understand that flashing the ROM will always encrypt my device even after unencryption, such a shame. It would be a pain to always unencrypt, ah well. It's worth all the goodies that PA features.
I hear you can flash a kernel at the same time that turns off the encryption
#stayparanoid
Pirateghost said:
I hear you can flash a kernel at the same time that turns off the encryption
#stayparanoid
Click to expand...
Click to collapse
this is true, i flashed franco and did not get encrypted.
m1r4j91 said:
I was unencrypted on my previous stock ROM. I then flashed PA, I noticed that it has encrypted my device again which is no problem as I can unencrypt. So my question is this, If I stay unencrypted, will future OTA updates from PA always encrypt me ?
Click to expand...
Click to collapse
Pirateghost said:
I hear you can flash a kernel at the same time that turns off the encryption
#stayparanoid
Click to expand...
Click to collapse
I am wondering if this method would work. It appears to work on CM. I will be flashing PA shortly and like yourself I am presently unencrypted on stock.
http://forum.xda-developers.com/showthread.php?t=3000788
Pirateghost said:
I hear you can flash a kernel at the same time that turns off the encryption
#stayparanoid
Click to expand...
Click to collapse
I can confirm that I unencrypted again, wiped all userdata, re-flashed rom/gapps and flashed franco (straight after in recovery, I didn't boot after flashing rom). This method kept my phone unencrypted. Thanks for your help !
This really bums me out. I just flashed PA and was not aware that it was going to Encrypt me. Its got about 10 minutes to go on the encryption. Wish I would have seen this thread first. Thank you for the Kernel tip. I plan on formatting and re-flashing.

Decrypting Storage

I know on most devices I've owned you needed a non-encrypted kernel and I had to perform a format of data to remove encryption. I have seen a few posts in a couple of other threads but nothing I saw was definitive. Does anyone know if unencrypting the XL is even possible? If so, which kernel are you using?
I also have the same question, I just want descrpt data partition to avoid risk when I turn to TWRP and MultiROM in future,
So anyone try this? I can not understand why I need Magisk here??
http://androiding.how/disable-verity-force-encryption-pixel-xl-decrypt/
Mike02z said:
I know on most devices I've owned you needed a non-encrypted kernel and I had to perform a format of data to remove encryption. I have seen a few posts in a couple of other threads but nothing I saw was definitive. Does anyone know if unencrypting the XL is even possible? If so, which kernel are you using?
Click to expand...
Click to collapse
Azlun said:
I also have the same question, I just want descrpt data partition to avoid risk when I turn to TWRP and MultiROM in future,
So anyone try this? I can not understand why I need Magisk here??
http://androiding.how/disable-verity-force-encryption-pixel-xl-decrypt/
Click to expand...
Click to collapse
Notice in the attached that it states that TWRP plus SuperSU decrypts file based encryption.... https://www.xda-developers.com/supersu-updated-to-work-with-twrp-on-pixel-and-pixelxl/
cam30era said:
Notice in the attached that it states that TWRP plus SuperSU decrypts file based encryption.... https://www.xda-developers.com/supersu-updated-to-work-with-twrp-on-pixel-and-pixelxl/
Click to expand...
Click to collapse
" Dees_Troy to allow TWRP to decrypt the data partition involves modifying the same init binary " is NOT what I want according developer's
https://plus.google.com/+DeesTroy Pixel update 4 picture.
What I want is need the full device decryption permanently, on Anroid running time, not only on TWRP.
so, I think that is maybe more than TWRP can do, I guess a special boot.img or a kernel patch zip is need to reach what I need.
Mike02z said:
I know on most devices I've owned you needed a non-encrypted kernel and I had to perform a format of data to remove encryption. I have seen a few posts in a couple of other threads but nothing I saw was definitive. Does anyone know if unencrypting the XL is even possible? If so, which kernel are you using?
Click to expand...
Click to collapse
Decrypting your pixel is possible. The process isn't much different than any previous Nexus. It differs due to the removal of the recovery partition thus the recovery fstab is now in the kernels ramdisk. So you must edit out forecencryption in both fstabs. (fstab.marlin,fstab.recovery).
Fastboot format userdata, flash a modified kernel, done..
Haven't seen any custom kernels that remove the flag yet so I modified ElementalX.
http://forum.xda-developers.com/pix...oem-unlock-t3498287/post69733387#post69733387
blueyes said:
Decrypting your pixel is possible. The process isn't much different than any previous Nexus. It differs due to the removal of the recovery partition thus the recovery fstab is now in the kernels ramdisk. So you must edit out forecencryption in both fstabs. (fstab.marlin,fstab.recovery).
Fastboot format userdata, flash a modified kernel, done..
Haven't seen any custom kernels that remove the flag yet so I modified ElementalX.
http://forum.xda-developers.com/pix...oem-unlock-t3498287/post69733387#post69733387
Click to expand...
Click to collapse
I did use your modified Elemental kernel that was in the thread about the ability to show that your bootloader is unlocked.
Here is what I did...
Went into TWRP and did a format data from the wipe menu.
Flashed your kernel via USB SD dongle.
Rebooted.
Took about 5-8 minutes to boot but when I went into "Security" it still showed my phone was encrypted. I did this with every Nexus device I've owned but not sure what I'm doing wrong.
Mike02z said:
I did use your modified Elemental kernel that was in the thread about the ability to show that your bootloader is unlocked.
Here is what I did...
Went into TWRP and did a format data from the wipe menu.
Flashed your kernel via USB SD dongle.
Rebooted.
Took about 5-8 minutes to boot but when I went into "Security" it still showed my phone was encrypted. I did this with every Nexus device I've owned but not sure what I'm doing wrong.
Click to expand...
Click to collapse
Don't you need to format user data with fast boot to decrypt?
Sent from my Google Pixel XL using XDA Labs

disable the encryption on stock rom 7.1.1

hi, I unlocked and rooted my nexus with 5x stock rom 7.1.1
I try to disable the encryption of files by formatting the data partition, but if you check in the SECURITY settings, the phone is always encrypted.
What am I doing wrong? Thank you.
Decrypt Question
Are you flashing SuperSu to patch kernel to remove forced encryp or flashing a custom kernel to remove it? If not, the stock kernel will re-encrypt upon boot.
I think that is normal, mine also shows encrypted currently with a stock kernel. Only time I need to decrypt is in TWRP, and instead of a password, I'm using a pattern.
TypNguy said:
I think that is normal, mine also shows encrypted currently with a stock kernel. Only time I need to decrypt is in TWRP, and instead of a password, I'm using a pattern.
Click to expand...
Click to collapse
That's probably not the kind of decryption he was looking for.
The correct answer has been given
thanks for the answers, but I still have the same problem.
I rooted, I installed the latest TWRP recovery, as well installed nexus ...
Then I formatato the DATA partition.
Start the well nexus (latest version) and under the heading Safety, the phone is still encrypted!
The kernel of pure nexus is stock?

[OP5] Full-Disk-Encryption Enabler for OP5

You miss Full-Disk Encryption on your OnePlus 5?
Here's a fix.
Flash the zip below after flashing your kernel (which means after every ROM update as well!).
The very first time you flash this mod, you'll have to format userdata, or bad things will happen.
First-time Install instructions:
Flash your ROM
Flash the attached Zip
(Optional) Flash Magisk
Format userdata. In TWRP, go to Wipe -> Format Data
Reboot
You are now unencrypted.
To encrypt in Full-Disk Encryption mode, go to Settings -> Security -> Encrypt
You're now in FDE mode!
Profit!
And don't forget to reflash this module every time you flash a new boot image.
XDA:DevDB Information
Full-Disk-Encryption Enabler for OP5, Device Specific App for the OnePlus 5
Contributors
Fif_
Version Information
Status: Beta
Current Beta Version: 1.0
Beta Release Date: 2017-09-12
Created 2017-09-13
Last Updated 2017-09-13
Here's the Zip.
@Fif_ should i erase "internal storage" or just data partition!Thank You!
Sent from my ONEPLUS A5000 using Tapatalk
dragoi90 said:
@Fif_ should i erase "internal storage" or just data partition!Thank You!
Sent from my ONEPLUS A5000 using Tapatalk
Click to expand...
Click to collapse
You need to format the data partition. That all also nuke the internal storage by the way, so your phone will be back to factory reset.
Is this used for people who decrypted their devices and wish to go back to encrypted so that they can flash roms that only works with encrypted?
BlueEffect said:
Is this used for people who decrypted their devices and wish to go back to encrypted so that they can flash roms that only works with encrypted?
Click to expand...
Click to collapse
No this is for people that want to run FDE rather than FBE. Eg. to have Xposed working.
Fif_ said:
No this is for people that want to run FDE rather than FBE. Eg. to have Xposed working.
Click to expand...
Click to collapse
You can have Xposed working with FBE by just soft rebooting using Xposed installer.
alukarulz said:
You can have Xposed working with FBE by just soft rebooting using Xposed installer.
Click to expand...
Click to collapse
You are right, but I don't want to have to do that, I want Xposed on the first boot...
BlueEffect said:
Is this used for people who decrypted their devices and wish to go back to encrypted so that they can flash roms that only works with encrypted?
Click to expand...
Click to collapse
If you want the go under settings and security and encrypt your phone
BlueEffect said:
Is this used for people who decrypted their devices and wish to go back to encrypted so that they can flash roms that only works with encrypted?
Click to expand...
Click to collapse
ndarkside93 said:
If you want the go under settings and security and encrypt your phone
Click to expand...
Click to collapse
This is used to change encryption type from FBE to FDE. You can also use it to run decrypted.
Fif_ said:
This is used to change encryption type from FBE to FDE. You can also use it to run decrypted.
Click to expand...
Click to collapse
I know.I was just answering his question.
alukarulz said:
You can have Xposed working with FBE by just soft rebooting using Xposed installer.
Click to expand...
Click to collapse
Fif_ said:
You are right, but I don't want to have to do that, I want Xposed on the first boot...
Click to expand...
Click to collapse
Ahh... I see... I am getting tired of having to soft reboot after each reboot. It looks like this FDE mod/hack would resolve this problem, right? Are there any real drawbacks to using FDE over FBE? What about if/when I decide to switch to another ROM?
sjamie said:
Ahh... I see... I am getting tired of having to soft reboot after each reboot. It looks like this FDE mod/hack would resolve this problem, right? Are there any real drawbacks to using FDE over FBE? What about if/when I decide to switch to another ROM?
Click to expand...
Click to collapse
I downside is you have to flash the fde flash file Everytime you flash an update. Plus the first time you need to erase data.
alukarulz said:
I downside is you have to flash the fde flash file Everytime you flash an update. Plus the first time you need to erase data.
Click to expand...
Click to collapse
Would I have to also erase my data when switching to a different ROM?
alukarulz said:
I downside is you have to flash the fde flash file Everytime you flash an update. Plus the first time you need to erase data.
Click to expand...
Click to collapse
I'm already flashing Magisk after every ROM update, so it's just one more zip to flash.
Actually stock OOS doesn't seem to care, you only have to flash this mod once, before you convert to FDE.
OOS 4.5.10 will happily boot in FDE even without the mod, provided that the data partition is already FDE.
That's not the case for every ROM.
Another downside is that no unattended boots are possible. You have to type in the FDE password to boot into Android.
sjamie said:
Would I have to also erase my data when switching to a different ROM?
Click to expand...
Click to collapse
No. Only once.
Fif_ said:
I'm already flashing Magisk after every ROM update, so it's just one more zip to flash.
Actually stock OOS doesn't seem to care, you only have to flash this mod once, before you convert to FDE.
OOS 4.5.10 will happily boot in FDE even without the mod, provided that the data partition is already FDE.
That's not the case for every ROM.
Another downside is that no unattended boots are possible. You have to type in the FDE password to boot into Android.
Click to expand...
Click to collapse
Thanks! I'll definitely give this mod a try if I truly get tired of having to soft boot after each normal boot. Is there a tasker profile or some other way to automate that?
sjamie said:
Thanks! I'll definitely give this mod a try if I truly get tired of having to soft boot after each normal boot. Is there a tasker profile or some other way to automate that?
Click to expand...
Click to collapse
Yes you can, run in a root shell:
Code:
setsid sh -c 'stop; start'
But I always run into strange things in Xposed if it's not running at boot, so YMMV.
Be careful not to just restart the system UI but the full zygote stack.
Fif_ said:
Yes you can, run in a root shell:
Click to expand...
Click to collapse
Thank you. What exactly is that command doing? Do I have to run it after each boot?
sjamie said:
Thank you. What exactly is that command doing? Do I have to run it after each boot?
Click to expand...
Click to collapse
"stop" stops all Android services.
"start" starts them again.
The "setsid sh" wrapper is there so that the commands will survive the Android shutdown and run to completion even if the parent process calling root is killed (which will happen as soon as "stop" runs).
Yes you'd have to run this after every boot.
But be careful that the second time Android starts after a boot is not detected as a second boot event or you'll end up in a restart loop.

MIUI 9 encryption

Hi guys,
I'm trying to find ROM that supports encryption. There are two options available:
1. Encrypt using lock screen password
2. Encrypt device
The first one does nothing. I tried booting into TWRP and see all files unencrypted that are supposed to be, according to the disclaimer.
The second does not finish, it just gets to 100% and then stuck (I waited for a few hours) and the only way it to reboot having corrupted FS.
So the question is how to enable data encryption?
I tried almost everything global stable, Chinese stable and dev ROMS, original and miuipro and xioami.eu. And everything with the same outcome.
MIUI should be using file based encryption which will be present when you boot the ROM.
No need to enable it. Just don't disable it....
Most of the Nougat ROMs for Mi 6 support file based encryption now so all you need do is FORMAT data (not just wipe) and it will be present.
My suggestion would be to install and MIUI stock ROM and then format data (that includes internal storage so backup if you are using it now).
Then reboot and start phone as clean device.
There doesn't seem to be an advantage to using ROMs that don't have file based encryption and then trying to enable it later.
Rom either has FBE or it doesn't have encryption at all for me :/
Does it work for you? How do you confirm this?
I did format from TWRP, ran through setup and took a photo.
I still can access files and can see the content without entering any password from TWRP.
By default all encryption options are unset in MIUI.
You are saying right things if that would be vanilla Android but it seems something is broken in MIUI.
conmu said:
Hi guys,
I'm trying to find ROM that supports encryption. There are two options available....
.
Click to expand...
Click to collapse
I flashed last global stable rom (1.9Gb .tgz) using mi flash tool after a format data in twrp and the device was encrypted by default. I only had to switch on "encrypt using lockscreen password" in privacy settings. But i don't know why even though i flash twrp the stock recovery returns after every reboot
Usefull link:
https://gadgets.ndtv.com/mobiles/fe...nstall-redmi-note-4-mi-max-2-6-5s-mix-1771733
valeriopastore20 said:
I flashed last global stable rom (1.9Gb .tgz) using mi flash tool after a format data in twrp and the device was encrypted by default. I only had to switch on "encrypt using lockscreen password" in privacy settings. But i don't know why even though i flash twrp the stock recovery returns after every reboot
Usefull link:
https://gadgets.ndtv.com/mobiles/fe...nstall-redmi-note-4-mi-max-2-6-5s-mix-1771733
Click to expand...
Click to collapse
You have to disable the stock recovery being reflashed from system with a script.
Not sure where you get that though it comes default with Coffaces TWRP.
Are you using the official TWRP?
If so does it work properly?
Dobsgw said:
You have to disable the stock recovery being reflashed from system with a script.
Not sure where you get that though it comes default with Coffaces TWRP.
Are you using the official TWRP?
If so does it work properly?
Click to expand...
Click to collapse
I'm using this one
https://forum.xda-developers.com/mi-6/development/recovery-twrp-3-1-1-0-xiaomi-mi6-t3608008
because with other recoveries i had problems while restoring data from backup (error 255).
valeriopastore20 said:
I'm using this one
https://forum.xda-developers.com/mi-6/development/recovery-twrp-3-1-1-0-xiaomi-mi6-t3608008
because with other recoveries i had problems while restoring data from backup (error 255).
Click to expand...
Click to collapse
Okay cool.
Doesn't look like it has decryption support so maybe I'll try official
valeriopastore20 said:
the device was encrypted by default
Click to expand...
Click to collapse
Sorry for the stupid question but how did you understand this? What is the actual check to confirm this?
conmu said:
Sorry for the stupid question but how did you understand this? What is the actual check to confirm this?
Click to expand...
Click to collapse
Settings - security - encryption = "phone encrypted"
conmu said:
Sorry for the stupid question but how did you understand this? What is the actual check to confirm this?
Click to expand...
Click to collapse
in privacy settings you will see something like this (i don't have miui9 encrypted anymore so i looked for a screenshot on google) http://attach.en.miui.com/forum/201604/10/202340xmpnzcaciianqnpg.png
Dobsgw said:
Settings - security - encryption = "phone encrypted"
Click to expand...
Click to collapse
SYSTEM & DEVICE > Additional settings > Privacy: Advanced # Encrypt phone
If this it then that is point #2 from my initial message and that never finishes with any ROM I tried
So you say this is enabled right after the flashing and you did not actually ran "Encrypt phone" from this menu (that only works if battery charged above 80%)?
And when you boot into TWRP it asks for a password?
conmu said:
SYSTEM & DEVICE > Additional settings > Privacy: Advanced # Encrypt phone
If this it then that is point #2 from my initial message and that never finishes with any ROM I tried
So you say this is enabled right after the flashing and you did not actually ran "Encrypt phone" from this menu (that only works if battery charged above 80%)?
And when you boot into TWRP it asks for a password?
Click to expand...
Click to collapse
Never had to manually encrypt no.
Just choose a ROM with FBE enabled. That includes MIUI stock.
Flash it and then format data with TWRP.
On first boot it creates the encryption.
Then when you set a password this is your key.
When you boot to TWRP it will ask for the password to decrypt. Password is your pin.
Dobsgw said:
Never had to manually encrypt no.
Just choose a ROM with FBE enabled. That includes MIUI stock.
Flash it and then format data with TWRP.
On first boot it creates the encryption.
Then when you set a password this is your key.
When you boot to TWRP it will ask for the password to decrypt. Password is your pin.
Click to expand...
Click to collapse
Did you flash it via TWRP and formatted without reboot in the same session within TWRP? That is probably the only way I did not try.
conmu said:
Did you flash it via TWRP and formatted without reboot in the same session within TWRP? That is probably the only way I did not try.
Click to expand...
Click to collapse
Yeah that would be the best way.
Formatting data deletes entire SD card so back it up to PC!

Categories

Resources