How to set a password on TWRP and block smartphone recovery. Android data encryption.

Hacker

Professional
Messages
1,048
Reputation
9
Reaction score
718
Points
113
To protect personal data, quite a few users put security elements that can be fingerprint scanners, face recognition using Face ID, graphic symbols or standard passwords from letters and numbers.

TWRP has a function - lock and password protection. We're not talking about the PINs or passwords you set for your phone's lock screen. The blocking we are talking about applies only to TWRP. When you turn off your device and boot into TWRP, recovery will ask for a lock code to proceed.

This is a really useful feature. If your phone is stolen and a thief tries to erase all data, he cannot do it because he does not have a lock code. This feature can be applied to all devices that have TWRP active recovery.
5jfABr-uLko.jpg


Enable password lock in TWRP
  1. Download the file that includes password blocking: ui.zip
  2. Download the zip file to your phone and move it to / sdcard / TWRP / theme.
  3. Turn off the phone and boot into recovery.
  4. Go to "Settings" and there you can set and change the password you like.
Once you've created a password, restart your phone and try to boot into TWRP. You will be prompted for a password code.

Why block TWRP
  1. Many people first encountered TWRP not in order to create a full backup of the system, the so-called Nandro> custom ROM firmware on their smartphone.
  2. Users who are interested in the Andro system> to reset the password or lock pattern, you can make a full wipe in recovery.
Both examples show how powerful recovery mode can be in the right hands. But how to protect yourself from unauthorized access to such a tool by third parties? A fairly simple and convenient way is to set a password for entering the recovery.
cw5ZZ6UovM4.jpg


The methods from this article do not provide 100% protection against interference with the system through the recovery menu, since setting a password for entering TWRP does not prevent you from re-flashing Recovery itself with the loss of the settings made, but in inept hands will definitely make it difficult for a swindler to use a smartphone or a thief.

Requests password for TWRP! I don't understand what kind of password you need to enter and why! Decrypt data?
jBq0q4Rs9JE.jpg


"Recovery Environment" Your phone is a piece of software that you rarely see. It is used to install Android updates, restore to factory settings, and perform other tasks. The default recovery environment from Google is very simple, but third-party developers offer their solutions, for example, Team Win Recovery Project (TWRP) - allows you to make backups, install custom firmware, get superuser rights, and much more useful ...

The easiest way is to enter 8 zeros in the password field. It almost always helps.

Data encryption on Android devices. TWRP requires a password because / data is encrypted
Do you use your Android smartphone (tablet) to take personal photos, read important emails, shop online with your credit card, edit and transfer important documents? If your answer is yes, then you should consider encrypting your device.

The most important device protection is a lock screen with a password or pattern. In terms of protection, they are absolutely the same. It is with them that the attacker will have to face it first, so a good password is needed here.

Encrypting your phone means that if your phone is locked, your files are encrypted. Any files sent to and received from your phone will not be encrypted unless you use additional methods. The only difference between an unencrypted and an encrypted phone from the user's point of view is that you will now have to use a password to unlock the phone (tablet).

If your phone is not encrypted, then the password is just a screen lock. In fact, in this case, the password simply locks the screen - that is, it does nothing to protect the files that are stored on the device.

How do I enable encryption on an Android device?
1. Open the Settings menu.
2. In Settings, select Security> Encryption (Encrypt device).
3. As required, you must enter a password of at least six characters, at least one of which is a number.

As soon as you set the password, the process of encrypting your files will start. Encryption can take an hour or more, so you must turn on the charger before encrypting it.

How to decrypt?
To finally decrypt the filesystem, you need to format/data. Remember, formatting /datawill remove all your files, including photos, music, etc., from your internal storage.
Thus, today there is a difficult choice - either you encrypt your device and put up with huge inconveniences, or you get usability, but at the expense of security.

Based on the results of
As a result, if you set a password on Recovery and on the smartphone itself, we will get a fully encrypted device with a pin code on the lock screen, a locked bootloader and a password-protected custom recovery console. An almost impregnable fortress. An attacker would not even be able to reset the smartphone to factory settings. But there is one caveat: the contents of the memory card will be encrypted only if it is built-in.
 
Top