Develop Bugs

How do I change the encryption key?

Whenever I flash a new rom after a fullwipe, I still have to type in a pin to boot the phone. I think this is called "verified boot". This is also the pin I need in TWRP to decrypt data. So obviously this pin has been stored outside of data or system partitions and is used upon every new install/boot of a new rom to encrypt it immediately upon first boot.
So where is this encryption key stored and how do I delete it?

Lownita said:
Whenever I flash a new rom after a fullwipe, I still have to type in a pin to boot the phone. I think this is called "verified boot". This is also the pin I need in TWRP to decrypt data. So obviously this pin has been stored outside of data or system partitions and is used upon every new install/boot of a new rom to encrypt it immediately upon first boot.
So where is this encryption key stored and how do I delete it?
Click to expand...
Click to collapse
If this link helps you ?
https://source.android.com/security/encryption/index.html

I have this exact problem, not sure how to resolve this issue but it seems my phone needs my pin even after wiping the phone.
I would love to fix this, if anybody has any tips that would be great, I am running a OnePlus 3 with root and twrp.
-thanks.

DonaldKerabatsos said:
I have this exact problem, not sure how to resolve this issue but it seems my phone needs my pin even after wiping the phone.
I would love to fix this, if anybody has any tips that would be great, I am running a OnePlus 3 with root and twrp.
-thanks.
Click to expand...
Click to collapse
Go to fastboot, type fastboot format userdata. Or go to twrp, wipe, wipe data via the button. This should do the same. Beware that data and your internal storage will get wiped.

to disable the pin you have to do this:
setting>security>screen lock> type PIN> PIN
then you will see Secure start-up ( Require PIN to start device/ No Thank you)

[Q] TWRP Restore makes PIN error

I had this problem with all TWRP versions for this device:
When I completely restore all partitions with TWRP and I boot up it gives "Wrong PIN" but the PIN is right. Also tried 1234, 123456, 0000 and 000000. Cache/Dalvik format does not do anything.
Nothing works, so I'm not able to use my lovely P2 now...
Anyone can help me?

Sorry should have googled it:
Firstly you need to boot into TWRP and then follow these steps:
Go to Advanced > File Manager > data > system.
And then delete locksettings.db, gatekeeper.password.key and gatekeeper.pattern.key.

HOW TO FIX
------------------------
Simply boot into TWRP and enter your PIN (if you've set one) to decrypt the stroage. If you don't have TWRP (for whatever reason) you can do so via ADB too but ONLY if you've connected your phone to your PC beforehand and also accepted it's fingerprint on the phone itself.
Delete (or rename) the following files inside /data/system (note that probably not all of them exist for you, simply delete those you can find):
password.key
pattern.key
locksettings.db-wal
locksettings.db-shm
locksettings.db
Reboot the phone and (if you've set a PIN) enter it to decrypt the storage one more time. After that you can simply unlock your phone with a swipe.
Go into Settings > Security and set your preferred unlock method again, Android will ask you if you want to set a boot-time code too. Select whatever you want here, it's a nice security addition but can be annoying sometimes.
Enjoy your phone again!

^This. I was having a similar problem not able to unlock the phone after installing other rom via the dual boot app.

ilmervanhattem said:
I had this problem with all TWRP versions for this device:
When I completely restore all partitions with TWRP and I boot up it gives "Wrong PIN" but the PIN is right. Also tried 1234, 123456, 0000 and 000000. Cache/Dalvik format does not do anything.
Nothing works, so I'm not able to use my lovely P2 now...
Anyone can help me?
Click to expand...
Click to collapse
Yah it's bugs in twrp, try use and flash with my latest compile unofficial twrp-3.1.0-0 that already fix bugs for pin, pasword, or patern encryption decryption

ilmervanhattem said:
HOW TO FIX
------------------------
Simply boot into TWRP and enter your PIN (if you've set one) to decrypt the stroage. If you don't have TWRP (for whatever reason) you can do so via ADB too but ONLY if you've connected your phone to your PC beforehand and also accepted it's fingerprint on the phone itself.
Delete (or rename) the following files inside /data/system (note that probably not all of them exist for you, simply delete those you can find):
password.key
pattern.key
locksettings.db-wal
locksettings.db-shm
locksettings.db
Reboot the phone and (if you've set a PIN) enter it to decrypt the storage one more time. After that you can simply unlock your phone with a swipe.
Go into Settings > Security and set your preferred unlock method again, Android will ask you if you want to set a boot-time code too. Select whatever you want here, it's a nice security addition but can be annoying sometimes.
Enjoy your phone again!
Click to expand...
Click to collapse
After doing this screen lock is by passed but later not able to set new pin. Settings app crashing.

Thanks for this info but I too had this problem yesterday and after 2 hours trying to figure it out had to flash the rom from scratch. Hopefully it can be fixed.

PrasadD said:
After doing this screen lock is by passed but later not able to set new pin. Settings app crashing.
Click to expand...
Click to collapse
Thanks a lot.

I keep this zip on my phone and flash it after every TWRP recovery.
It deletes needed files automatically.
https://mega.nz/#!dYx3lYoQ!4K2swB24JNKihws2BHso0B6D5w-JM-pRlTWksILO2fE

ilmervanhattem said:
Sorry should have googled it:
Firstly you need to boot into TWRP and then follow these steps:
Go to Advanced > File Manager > data > system.
And then delete locksettings.db, gatekeeper.password.key and gatekeeper.pattern.key.
Click to expand...
Click to collapse
Thank you, just fixed my Zenfone 3 Laser pin error after twrp restore just by deleting these 3 files. Went back to settings and set another pin, restart, test, all good without errors. Much appreciated

HTC 10 doesnt show up in Windows explorer apfter TWRP wipe

Hello guys,
I just installed TWRP onto my HTC 10. I unlocked the bootloader and flashed the recovery with TWRP. I backed up the default system and then wiped the Dalvik /ART Cache, the system partition, data partion and internal storage. As I now wanted to install LineageOS my device doesn't show up in the windows explorer. I tried rebooting the phone into recovery mode but it didn't work. So basically I can't accses my phone from my pc.
Can you give me some advice?
################ SOLVED ###################
I booted into TWRP. I chose "wipe" and then selected "format data". The description of "format data" already says "will remove the encryption of your phone". So I formated my phone, insalled LineageOS and GApps and the system is running, no password needed.
################ SOLVED ###################

_JonRyan said:
Hello guys,
I just installed TWRP onto my HTC 10. I unlocked the bootloader and flashed the recovery with TWRP. I backed up the default system and then wiped the Dalvik /ART Cache, the system partition, data partion and internal storage. As I now wanted to install LineageOS my device doesn't show up in the windows explorer. I tried rebooting the phone into recovery mode but it didn't work. So basically I can't accses my phone from my pc.
Can you give me some advice?
Click to expand...
Click to collapse
So basically you wiped everything you could without knowing what you were actually wiping, and what wiping that stuff would actually do to your phone?
When you wipe the system partition you won't have an OS unless you flash a ROM directly after.
Place a ROM onto your extSD and put that into your phone. Boot to recovery and flash the ROM.

I'm aware of what a wipe does, but I wasn't prepared for this case. I flashed a couple Samsung Devices and after flashing them I still had access to the phone via my pc as long I was in recovery mode. But it seems to me, that I found the problem. The device is, as far as I know, encryped by default and a signal loss after wiping/flashing the device is common.
https://forum.xda-developers.com/htc-10/development/root-supersu-2-71-forceencrypt-verity-t3373258
However, I managed to install LineageOS and GApps, and the system boots. But after the boot is completed I am facing a screen where I have to enter a password to unlock Android. And I dont know which password I have to enter.
Do you know how to continue?
Thanks for your help, I really apprechiate it.

_JonRyan said:
I'm aware of what a wipe does, but I wasn't prepared for this case. I flashed a couple Samsung Devices and after flashing them I still had access to the phone via my pc as long I was in recovery mode. But it seems to me, that I found the problem. The device is, as far as I know, encryped by default and a signal loss after wiping/flashing the device is common.
https://forum.xda-developers.com/htc-10/development/root-supersu-2-71-forceencrypt-verity-t3373258
However, I managed to install LineageOS and GApps, and the system boots. But after the boot is completed I am facing a screen where I have to enter a password to unlock Android. And I dont know which password I have to enter.
Do you know how to continue?
Thanks for your help, I really apprechiate it.
Click to expand...
Click to collapse
Obviously you didn't exactly know, because if you did you would have known that wiping /system would leave you with no OS.
Not slagging you here. I did the exact same thing when I had just got my 2nd gen Nexus 7 and switched to TWRP from CWM for the first time.
For your password issue:
twrp > advanced > file manager > data > system ~ delete the locksettings.db files and reboot

Thank you for your reply!
Unfortunatley, the folder "data" doesn't contain any subfolder or file. Do you still know how to unlock my device?

################ SOLVED ###################
I booted into TWRP. I chose "wipe" and then selected "format data". The description of "format data" already says "will remove the encryption of your phone". So I formated my phone, insalled LineageOS and GApps and the system is running, no password needed.
################ SOLVED ###################

My OP3 says wrong passwd on boot, but in twrp same decrypt passwd works... Help!?!

Ok so i have a OnePlus 3 and it has an apparent glitch, im running a custom ROM, (shouldnt have anything to do with it... I would think) and whenever i try booting my phone it keeps asking for my encryption password, and so I enter in the password, and it keeps saying wrong password...
now when i boot into my recovery, it will ask me for the encryption password, and so i enter the same exact password again, and it successfully decrypts my data, it works.
now why would that work in recovery and not for the bootup sequence...?
I tried using my lockscreen PIN, the decryption password, the default decryption password, and still keeps giving me wrong password.
Android 7.1.2
PureNexus Rom
OnePlus 3
please help, thanks

Follow this and it should sort it out
In twrp, head to Advanced > File Manager, and go to the /data/system folder. Scroll down and find the two files with the .key extension. Delete both of them (by tapping on the file and then tapping the “Delete” button). Then, delete all the files containing the word locksettings.
So on my Nexus 5X, for example, I deleted the following files:
password.key
pattern.key
locksettings.db
locksettings.db-shm
locksettings.db-wal'
Try this.

nope didnt work back to same screen on boot

however i can take screenshots... LOL

Had same thing today but twrp was also not accepting my password so did a full wipe ,lpst all my data and not not using any lockscreen and fp because of fear of this happening again , i think magisk ask this if i flash su per su i will not get these things

Did you try the default password of password?

go to twrp and open file mangaer - data - system - delete locksettings.db and reboot

yep tried the defaults, did not work :*(

this didnt work for me

Factory Reset in TWRP (format data) should work.

I could only fix this by wiping the entire phone. FYI, entering the wrong password numerous times did not automatically wipe the phone. Instead it told me I had -5 (etc.) tries remaining. I never found out why exactly this whole thing happened.

If I had this problem try to format everything and reinstall. Before Backing Up

Always make nandroid backup after removing Secuirty and ensure that storage is un-encrypted for maximum ease.

I had the same thing, you or someone else must have encrypted your phone. When i encrypted my phone i never had the option to choose a password, so the next time i tryied getting into recovery it would ask me for a encryption password (which i never knew). Anws the only way to remove this was by full clean wipe and flash a new rom. P.S always backup before doing anything ?

Magisk and encryption

I installed RessurectionRemix and i followed the process i will describe now:
I was on 8.7.5 developer.
Flash MIUI from Mi Flash Tool just click on option Clean All, Let it flash and boot up, after it boots reboot to fastboot since you did only clean all it'll not relock BL.
Then flash twrp in fastboot. Go to wipe> advance> select everything (data, system, cache, dalvik, internal, vendor) everything. And swipe right.
Now keep in mind do not touch the format data option at all.
Now go to reboot menu and reboot to recovery after it boots back to recovery transfer the ROM and other files, flash and reboot system and you'll have 100% encrypted device.
Flash the rom
Flash gapps
After that process everything worked fine and the phone was encrypted. Almost instantly (5-10secs) after I power the phone it asked for password.
But i installed magisk through TWRP and since then it asks for password when the phone boots completely and asks the password just to unlock the lockscreen.
Inside settings it says phone is encrypted but my guess is, that it isn't encrypted.
How can i fix that? What is wrong in the process i followed? What is the correct process?
Thank you!

I guess those steps were for lineage os. For others, you've to format data to disable encryption.

i want to have encryption enabled.
I dont want encryption disabled.

What are you asking exactly?
If you go to
Settings - Security & Privacy - Encryption & Credentials - Under Encryption
Are you been offered the choice to encrypt phone? If your not then it is already encrypted.
Is it requesting a password to boot and also to unlock the device?
If you need password to boot, then you selected that as an option when setting up password.
Can be removed by changing your password to swipe/none and setup your password again.
If TWRP, can not decrypt the device, make sure your using the latest.
Why didn't you post your query in RR thread?

corkiejp said:
What are you asking exactly?
If you go to
Settings - Security & Privacy - Encryption & Credentials - Under Encryption
Are you been offered the choice to encrypt phone? If your not then it is already encrypted.
Is it requesting a password to boot and also to unlock the device?
If you need password to boot, then you selected that as an option when setting up password.
Can be removed by changing your password to swipe/none and setup your password again.
If TWRP, can not decrypt the device, make sure your using the latest.
Why didn't you post your query in RR thread?
Click to expand...
Click to collapse
I didnt post in RR because, i tried Aospextended and the same thing happened.
Thank you very much for the solution you gave!! I disabled screen lock,re-enable it with password and now it asks for passwoed on boot and on TWRP.
Thank you again!