OnePlus 3 potentially not encrypted - OnePlus 3 Questions & Answers

For info, I'd suggest avoiding the OnePlus 3 (and potentially 3T and 5) on security grounds.
I factory reset an encrypted OnePlus 3 before selling it, which should have cleared the encryption key and hence all personal and biometric data from the phone.
The new buyer was therefore somewhat surprised to complete the "new phone" Google set up process and discover several years worth of my text messages still in the messaging app. The buyer helpfully forwarded them on to me to prove it...
Apart from the fact that it's embarrassing (there's an awful lot of my personal data in the wild now), it raises some concerns about whether the phone was encrypted at all. I know damned well that it said it was, because I specifically checked and that's what gave me the confidence that a factory reset would wipe the phone.
The only thing that wasn't enabled is the setting to ask for a PIN at start-up.
The question is: was it just my phpne8, or is OnePlus pulling a fast one with all of them? This is not an easy thing to check.

David Horn said:
For info, I'd suggest avoiding the OnePlus 3 (and potentially 3T and 5) on security grounds.
I factory reset an encrypted OnePlus 3 before selling it, which should have cleared the encryption key and hence all personal and biometric data from the phone.
The new buyer was therefore somewhat surprised to complete the "new phone" Google set up process and discover several years worth of my text messages still in the messaging app. The buyer helpfully forwarded them on to me to prove it...
Apart from the fact that it's embarrassing (there's an awful lot of my personal data in the wild now), it raises some concerns about whether the phone was encrypted at all. I know damned well that it said it was, because I specifically checked and that's what gave me the confidence that a factory reset would wipe the phone.
The only thing that wasn't enabled is the setting to ask for a PIN at start-up.
The question is: was it just my phpne8, or is OnePlus pulling a fast one with all of them? This is not an easy thing to check.
Click to expand...
Click to collapse
The encryption doesnt work like that. All it does is make the device info unavailable if it is pulled by other means.
I have wiped my device time and time again and never had this issue. Sounds like the factory reset didnt take completely.

David Horn said:
For info, I'd suggest avoiding the OnePlus 3 (and potentially 3T and 5) on security grounds.
I factory reset an encrypted OnePlus 3 before selling it, which should have cleared the encryption key and hence all personal and biometric data from the phone.
The new buyer was therefore somewhat surprised to complete the "new phone" Google set up process and discover several years worth of my text messages still in the messaging app. The buyer helpfully forwarded them on to me to prove it...
Apart from the fact that it's embarrassing (there's an awful lot of my personal data in the wild now), it raises some concerns about whether the phone was encrypted at all. I know damned well that it said it was, because I specifically checked and that's what gave me the confidence that a factory reset would wipe the phone.
The only thing that wasn't enabled is the setting to ask for a PIN at start-up.
The question is: was it just my phpne8, or is OnePlus pulling a fast one with all of them? This is not an easy thing to check.
Click to expand...
Click to collapse
Thats indeed really weird..

Related

Password Lock! Can't unlock =(

A friend of mine was trying to be funny and put a password on my Tmobile Touch Pro2. The problem is, he states he doesn't remember what he put in there.
I called T-Mobile and they want to send me a warranty replacement. But I don't want a refurbished phone when I just bought this a month ago!
Please, is there any way around the default security lock?
First I would Kill him...lol but the only way I know is to Hard Reset. Someone else may know of a way but I dont...sorry...Tj
I assume that is "a former friend" now?
Friend, relative, acquaintance, doesn't matter. You screw something up, break it, render it inoperable, you make it right. Period. So he either unlocks it, or he buys you a new one.
There are ways of disabling the lock feature, but without knowing you presonally I have no idea as to whether you may have stolen the device or not (no offence intended at all) and wish to gain access to someones personal info.
Hard Reset will remove the lock but you will lose all data on the device.
Hold the two call buttons in and press the reset button with the stylus (keep the call buttons held in until you see the message "this will delete "etc etc) follow the on-screen prompts to restore the device to factory settings.
Cheers,
Beasty
Probably not what you want to hear, but I think that the 'Reset Password' option from the menu will also wipe the device.
Simply Hard Reset It. Everything you have in your phone will be wipe out. Also if you had encripted your SD Card, also everything will be unreadable...
If you haven't synched since the happy moment your docs and PIM data will be on your PC if you back up to Windows & use outlook.
Hey Beasty,
Do you know someone I can speak to who can authenticate that I own my phone and give me the back door for the stupid password reset without wiping my data?
I screwed up the password somehow and can't get it unlocked. I don't have the phone backed up yet and it has three years worth of contacts and pics from a family weekend I was just started to take off the phone.
Talked to Telus, HTC(they directed me here, although not officially)
Any help would be appreciated.
Sherrie

Factory reset protection

Hi Everyone,
could somebody help me a bit? I did a factory data reset in the recovery on my OP3. After the restart at the verify of the account, it says that my Google account isn’t the one that was synced the last time, so it doesn't let me through....I have changed the password of the account before I tried to sign in, can this be the problem? What can I do now?
OnePlus3 Factory Reset Protection
I have been reading all over the internet and XDA about the FRP problem, and stupidly, I live in a place far from the world so to speak, and a tourist offered me his phone, we made a deal, he did a factory reset in front of me, it left at the setup screen, and on the plane he went to wherever he was from. So I got home, tried to complete the setup and frozen at the google account verification screen. I don't even know this guys last name or how could I even know that this was the case now with Android? While I fully understand and support the reasons that this is implemented, I certainly didn't expect (and I am certain the previous owner didn't) I am left with a phone that I cannot use. Very frustrated, and makes me want to NEVER buy a phone from a person OR from the internet. Any advice or tips on how to recover it? Sorry if there is already one on here, but I cannot find it. Cheers.
OnePlus3 Factory Reset Protection [SOLVED]
I followed the instructions in this youtube video and SOLVED the problem, thanks to ISSAM GSM for his trick and apk!
youtube.com/watch?v=_uSezjE6yUM
Any another suggestion?
I can´t change the keyboard. My level protection it could be higher and I can´t jump google account protection.
Thanks

Bypassing Pixel 2 XL lock screen for deceased family member.

So as the title says, I have a family member who recently passed away over the weekend. The family is trying to access his phone for any pictures and videos of him with everyone. As of right now, we don't have any info about his Google account info. We're afraid to keep trying passwords in case it ends up wiping the data after a certain number of tries. I tried using Dr. Fone but the unlock software doesn't support this phone. Not sure what to do from here but I thought you guys might be able to help. Thanks, guys.
perhaps contact the local police to inquire if they have the capability to unlock the phone? They will probably require that you prove your relationship to the deceased which I don't think anyone on this forum could do. It's not that I don't believe you, but any creeper/theif/etc could say the same thing.
GL and sorry for your loss.
Sorry for your loss. If he had 2 step verification where you can send a text message to his cell phone #, you could do a Sim swap, pop the Sim in a phone that you have access to. Trigger the 2 step verification for forgot password and it might work.
Sent from my Pixel 2 XL using Tapatalk
I'm so sorry for your loss, and Hope you'd recover the content without much of a hassle.
Good Luck!
You can force a factory reset...that will delete apps and texts and any unsaved pics from texts will be deleted....BUT....it will not delete any pics taken by the cam and saved to the phone.
Good luck and sorry for your lost.
Was he logged into Gmail on a computer? Could possibly go to Google Photos and check for backed up photos and videos.
Sent from my Pixel 2 XL using Tapatalk
sorry for your loss, I hope you can recover the photos.
1st: was already mentioned. sim swap
2nd: Try to sign into their google account. If you know their gmail (you should be able to figure this out pretty easily) and know them pretty well you can probably guess their password especially if you can remember an "old" password they've used because people are creatures of habit and reuse the same or variations of the same passwords for years. Or you can do the "forgot password" option
3rd have the legal rep ask google.
Google lets third parties request the content from a deceased user's account, but this must be requested by the deceased person's legal representative. The legal representative must upload a copy of their government-issued ID and a copy of the death certificate. Even then, there's no guarantee the legal representative will gain access.
If this works, the legal representative would be able to access data from the deceased user's Drive, Gmail, Blogger, Google+, Google Photos, YouTube and other services. But again, if the deceased user didn't back up any photos in the first place, getting into the cloud backup won't do any good.
https://support.google.com/accounts/troubleshooter/6357590?hl=en#ts=6357650
4th: okay, this one is a little macabre and you said password but I have 2 methods to get into mine so I figure I'd say it......sigh.............somehow before the funeral 1) find a way to be alone with your relative and see if either of their index fingerprints will work to unlock the phone OR 2) I GUESS you COULD ask the funeral director to unlock their phone using their fingerprints but I'm not sure how agreeable they'd be on that one.. Look, I know it's creepy but if the photos/vids are important then......sigh.....damn it sounds even more eff'd up reading it than it did in my head. Okay, sorry, I'll stop now....
good luck
First of all, I'm sorry for your loss...
I have some inquiries, and then a suggestion...
First, do you know if the former owner had "unlocked" or "rooted" the phone/device? When you turn the device on, is there a warning in the powering up process that "warns" about having an "unlocked bootloader"?
If it is unlocked and/or rooted, there are more/further options that can be done, but only if it is in this "state"...
And as for my suggestion...
You might be aware of how Apple and iPhones/iPads have a sort of "find my iphone" or "find my device" type of connection and protocol on their devices... I've personally used the "Android"/Google version (called Android Device Manager [or ADM for short]) of this to find the last location of my phone and to also ring it. But I have also noticed that they (Google) are constantly evolving it and later added a "lock" option. So, taking it a step further, I checked if there was possibly an "unlock" option; and there is! Again, I personally have never used it and do not know much about it. After some cursory reading, there are certain criteria that has to have been met while the original owner was using the phone; but if, by some amazing circumstance or miracle, things have been set up properly (and you know the deceased google account information/login), there's a good chance you might be able to get the phone unlocked. You can find the information all about this here: https://one.comodo.com/blog/itsm/unlock-your-android-device-using-android-device-manager.php
One additional thought I just thought of while writing this, along the lines of talking to Google and explaining the situation, even if you don't have the google account information/login, you might be able to obtain that information from them if the situation is explained and they have protocols for this type of situation.
Again, I'm sorry for your loss, and I hope this helps. Good luck to you...

Question Android Factory Reset/Setup Inconsistencies

Sorry for the long post but this has been bothering me for years now. It happened on my 2XL and now on my 6Pro. Maybe someone smarter than me who understands software/hardware knows the reason behind this. But WHY when I do a factory reset does each time through the setup (Android 12 in this case) feel different??
1. Firstly, why is it called a factory reset when it obviously retains at least SOMETHING on the device? For example after a factory reset, the next time through the Android 12 setup it automatically populated my gmail account into the field.
2. Once through the setup it was giving my Google Fi app errors: [X] Close the app [X] wait, etc. This seemed to go away after I went through the setup, updated all the apps multiple times, THEN hit "finish google fi installtion", THEN doing another factory reset during which that error no longer appeared.
3. Even screens during the setup seem glitchy or inconsistent. I've see some screens reappear a second time like after inputting fingerprints. I click the button to move on, and it asked me again about fingerprints. I ACCEPTED and thought I'd have to redo it all, but then it just moved on.
So yea, in summary it feels like every time through it's something different. Is this just android? Maybe someone can help me better understand this phenomenon.
I also had issues with Fi activating. It finally did it once I had finished setting up the phone. Maybe it needed an update? As far as something being retained like Gmail, this usually happens when you wipe from fastboot as this does not wipe the security of the phone. If wiping from within the OS via settings this should not happen. Not sure about the others.
MarkAnthony121 said:
Sorry for the long post but this has been bothering me for years now. It happened on my 2XL and now on my 6Pro. Maybe someone smarter than me who understands software/hardware knows the reason behind this. But WHY when I do a factory reset does each time through the setup (Android 12 in this case) feel different??
1. Firstly, why is it called a factory reset when it obviously retains at least SOMETHING on the device? For example after a factory reset, the next time through the Android 12 setup it automatically populated my gmail account into the field.
2. Once through the setup it was giving my Google Fi app errors: [X] Close the app [X] wait, etc. This seemed to go away after I went through the setup, updated all the apps multiple times, THEN hit "finish google fi installtion", THEN doing another factory reset during which that error no longer appeared.
3. Even screens during the setup seem glitchy or inconsistent. I've see some screens reappear a second time like after inputting fingerprints. I click the button to move on, and it asked me again about fingerprints. I ACCEPTED and thought I'd have to redo it all, but then it just moved on.
So yea, in summary it feels like every time through it's something different. Is this just android? Maybe someone can help me better understand this phenomenon.
Click to expand...
Click to collapse
I've noticed this over the years. For security a reset doesn't wipe everything, I think you would need to flash the factory images and clear caches for that.
My first setup experience was not good. Wi-Fi kept turning off (been fine since) during the first setup so it kept stalling and doing all sorts of funny things.
It's just Android and Google, everything is a BETA version it seems.
For item 2 that is FRP. Factory Reset Protection. The account stays in there unless you remove it prior to reset. If you reset with the account still in there it will insist you use that account to set up the phone. That way if stolen the thief can't just reset it and use it.

Question Unique LockScreen Issue

OK guys and gals I have a unique situation. I have both a pattern lock and finger print lock on my Fold 3. I just changed my pattern and now forgot it. I know I know I am idiot but I can unlock the screen with my finger print but since I forgot the pattern I can not reset it. I have tried at least 10 times to get into the setting to change the pattern it no luck. Can you guys help me? Again I can open with finger print but can not unlock by pattern. Any help is GREATLY appreciated in advance!
I think you have to factory reset it.
Techvir said:
I think you have to factory reset it.
Click to expand...
Click to collapse
If I'm not mistaken it will AGAIN ask you for the pattern AFTER the factory reset. I just sold my Fold 1 on eBay and I factory reset it before I mailed it. The buyer called me the day he received it and said it was asking for the last pattern. I informed him it was factory reset and he said it was but still asked for the pattern. I gave it to him and haven't heard a word from him since. He added positive feedback several days later. so... just saying...
...My suggestion would be to endlessly continue to try different patterns before you try the reset. Your brain HAS to kick in at some point. lol
OJsakila said:
If I'm not mistaken it will AGAIN ask you for the pattern AFTER the factory reset. I just sold my Fold 1 on eBay and I factory reset it before I mailed it. The buyer called me the day he received it and said it was asking for the last pattern. I informed him it was factory reset and he said it was but still asked for the pattern. I gave it to him and haven't heard a word from him since. He added positive feedback several days later. so... just saying...
...My suggestion would be to endlessly continue to try different patterns before you try the reset. Your brain HAS to kick in at some point. lol
Click to expand...
Click to collapse
Are you sure that it wasn't Google activation? Since when you do factory reset but you don't remove the Google account before doing it. Then the device will ask for previous Google account to activate the device again.
Jake.S said:
Are you sure that it wasn't Google activation? Since when you do factory reset but you don't remove the Google account before doing it. Then the device will ask for previous Google account to activate the device again.
Click to expand...
Click to collapse
Well, this is possible. Im not really sure to be honest. I know I tried to completely reformat before I sent him the phone. I should have checked after I did that. I just turned it off and packed it up. Lesson learned, I guess. How would I have ALSO gotten rid of my google account before or after the reformat?
OJsakila said:
Well, this is possible. Im not really sure to be honest. I know I tried to completely reformat before I sent him the phone. I should have checked after I did that. I just turned it off and packed it up. Lesson learned, I guess. How would I have ALSO gotten rid of my google account before or after the reformat?
Click to expand...
Click to collapse
Before you do factory reset. Go into phone settings and then under accounts remove the linked Google account and any other accounts including samsung one. Then when you have no accounts connected, then you can do factory reset. This shall then remove the activation step from previous Google account.
Jake.S said:
Before you do factory reset. Go into phone settings and then under accounts remove the linked Google account and any other accounts including samsung one. Then when you have no accounts connected, then you can do factory reset. This shall then remove the activation step from previous Google account.
Click to expand...
Click to collapse
lol. I DEFFINATLEY did NOT do that. Ok. Well, at least we got to the bottom of that. lol I'm sure that was my issue. I'll remember that. +1
OJsakila said:
lol. I DEFFINATLEY did NOT do that. Ok. Well, at least we got to the bottom of that. lol I'm sure that was my issue. I'll remember that. +1
Click to expand...
Click to collapse
It's a easy to miss. Since alot of people don't know about it and then this happens. Buyer gets pisst off for receiving a locked device. So then device becomes worthles and only option for him to send it back and get money back. So the seller can then fix this mistake and then resell it again.
Jake.S said:
It's a easy to miss. Since alot of people don't know about it and then this happens. Buyer gets pisst off for receiving a locked device. So then device becomes worthles and only option for him to send it back and get money back. So the seller can then fix this mistake and then resell it again.
Click to expand...
Click to collapse
There must be a way around it. I traded in my Z Flip for this one, and I didn't remove the google account. The trade in company hasn't complained.
jeromepearce said:
There must be a way around it. I traded in my Z Flip for this one, and I didn't remove the google account. The trade in company hasn't complained.
Click to expand...
Click to collapse
Not really. If there was then it would be used by ones who steals it. Alot of trade companies won't reuse the device if you have Google account left on it and such. Then device worth drops and the company will use it as spare parts instead.
Jake.S said:
Not really. If there was then it would be used by ones who steals it. Alot of trade companies won't reuse the device if you have Google account left on it and such. Then device worth drops and the company will use it as spare parts instead.
Click to expand...
Click to collapse
They are not going to use that for parts, I think. It was in pristine condition. Besides, they would say to do this if it was an issue or they'd lose a lot of value in trade ins. I'm dubious, and I'm pretty certain that I've factory reset a few phones without this happening. I'm going to test this on my spare right now, in fact.
jeromepearce said:
They are not going to use that for parts, I think. It was in pristine condition. Besides, they would say to do this if it was an issue or they'd lose a lot of value in trade ins. I'm dubious, and I'm pretty certain that I've factory reset a few phones without this happening. I'm going to test this on my spare right now, in fact.
Click to expand...
Click to collapse
Well trust me it will request after factory reset. On Google activation and there it will ask previous Google account to re-activate the device. It's a anti theft protection thing to prevent theifs from being able to do factory reset. But I still think the company is going to use it for parts, since when you trade it to samsung then samsung tells you to remove the Google account and samsung account before doing factory reset. If you send the device in to them with the accounts on the device or that you did not do this. Then value on device drops and they will use the device as spare parts instead. Since they cannot bypass this anti theft protection and even Google claims there is no way around it.
Jake.S said:
Well trust me it will request after factory reset. On Google activation and there it will ask previous Google account to re-activate the device. It's a anti theft protection thing to prevent theifs from being able to do factory reset. But I still think the company is going to use it for parts, since when you trade it to samsung then samsung tells you to remove the Google account and samsung account before doing factory reset. If you send the device in to them with the accounts on the device or that you did not do this. Then value on device drops and they will use the device as spare parts instead. Since they cannot bypass this anti theft protection and even Google claims there is no way around it.
Click to expand...
Click to collapse
Great information here. Strange how a Google account is the ONLY thing that can wiggle its way so far into a device that Google themselves say there is no way around getting rid of it thru a "FACTORY RESET." hmm seems a little intrusive. But whatever..
O
Jake.S said:
Well trust me it will request after factory reset. On Google activation and there it will ask previous Google account to re-activate the device. It's a anti theft protection thing to prevent theifs from being able to do factory reset. But I still think the company is going to use it for parts, since when you trade it to samsung then samsung tells you to remove the Google account and samsung account before doing factory reset. If you send the device in to them with the accounts on the device or that you did not do this. Then value on device drops and they will use the device as spare parts instead. Since they cannot bypass this anti theft protection and even Google claims there is no way around it.
Click to expand...
Click to collapse
OK, just tried it. You're right, even after a hard factory reset it asks for the pattern. However, you can enter the google account details instead, which would solve OPs issue.
I'm also pretty certain that I wasn't told to remove the google account, and I did trade in with Samsung, although they use a 3rd party.
Edit: I'm wrong again! Just checked the email and it says to remove all security and passwords. Ooops!
jeromepearce said:
OK, just tried it. You're right, even after a hard factory reset it asks for the pattern. However, you can enter the google account details instead, which would solve OPs issue.
I'm also pretty certain that I wasn't told to remove the google account, and I did trade in with Samsung, although they use a 3rd party.
Edit: I'm wrong again! Just checked the email and it says to remove all security and passwords. Ooops!
Click to expand...
Click to collapse
OK, this explains it. When I do a soft factory reset, it doesn't ask for credentials afterwards, because you have to enter them before. It's only for the hard factory reset, which makes sense.
Anyway, OP can hard factory reset then enter the google account details. If OP can do a backup first, nothing should be lost.
jeromepearce said:
OK, this explains it. When I do a soft factory reset, it doesn't ask for credentials afterwards, because you have to enter them before. It's only for the hard factory reset, which makes sense.
Anyway, OP can hard factory reset then enter the google account details. If OP can do a backup first, nothing should be lost.
Click to expand...
Click to collapse
If you own the device you have no issues. But if you plan to sell it, then Google and Samsung accounts must be removed before doing any soft or factory reset. That way it won't ask for old Google account to activate the device again. But if your keeping the device then you have no problem to factory reset and then re login to your Google account since you shall know Google account password.
the entire password situation for these tech items are out of hand, I don't work for the FBI nor do I have security clearances, neither does 99.5% of the people in this world.
I don't need a password for my phone, sure my bank app or pay app will require one, but what will people do with my phone, see my pictures? OMG the horror!
Jake.S said:
If you own the device you have no issues. But if you plan to sell it, then Google and Samsung accounts must be removed before doing any soft or factory reset. That way it won't ask for old Google account to activate the device again. But if your keeping the device then you have no problem to factory reset and then re login to your Google account since you shall know Google account password.
Click to expand...
Click to collapse
My comment was to demonstrate that you don't need to remove any accounts. Doing a soft factory reset forces you to enter credentials, so obviating the need for a confirmation. A hard factory reset requires confirmation, because it can be performed outside of the OS and credentials cannot be confirmed.
This means that my traded in phone, where I didn't remove passwords nor accounts, is still usable without my credentials because all account information is deleted.
jeromepearce said:
My comment was to demonstrate that you don't need to remove any accounts. Doing a soft factory reset forces you to enter credentials, so obviating the need for a confirmation. A hard factory reset requires confirmation, because it can be performed outside of the OS and credentials cannot be confirmed.
This means that my traded in phone, where I didn't remove passwords nor accounts, is still usable without my credentials because all account information is deleted.
Click to expand...
Click to collapse
I don't think you understood, soft reset does not wipe accounts. While factory reset does but then it's locked to old Google account and requires activation. While soft reset don't since account is still there on the device
fastfed said:
the entire password situation for these tech items are out of hand, I don't work for the FBI nor do I have security clearances, neither does 99.5% of the people in this world.
I don't need a password for my phone, sure my bank app or pay app will require one, but what will people do with my phone, see my pictures? OMG the horror!
Click to expand...
Click to collapse
You don't need to have any security set up on your phone if you don't want it.
I like the ability to secure my phone. That means that apps like email don't need security, and all of my private documents dont need security.
I am not an FBI agent, nor do I play one on TV

Categories

Resources