Edgar Cervantes / Android Authority
There’s little doubt that keeping your personal data secure these days is pretty important, so it’s fortunate that Android gives you the encryption tools you need to secure your device right out of the box. If you have been wondering how to get started with securing your digital data, this guide will walk you through how to encrypt your Android device.
QUICK ANSWER
Newer Android phones are encrypted by default as long as you set up a lockscreen. In other words, simply set a pattern, PIN, or password to take advantage of Android's built-in encryption. If you don’t set either of these, an attacker can simply gain access to your device, without even having to break through Android's encryption.
If you need to encrypt your microSD card, you’ll have to manually do so under Settings > Security. However, this feature may not be present on every Android device.
JUMP TO KEY SECTIONS
- How to encrypt an Android phone
- How to encrypt text messages on Android
- Encrypt a microSD card
- Alternative options: Encrypt files with an Android app
How to encrypt an Android phone: Set a screen lock
Rita El Khoury / Android Authority
Virtually all Android devices on the market now come with encryption enabled by default. This is because Google required manufacturers to enable full-disk encryption starting with Android 6.0 Marshmallow, which debuted all the way back in 2015. With the release of Android 10 in 2019, that requirement was revised to the newer file-based encryption instead. The latter makes encryption a whole lot more painless from an end-user perspective.
Rather than locking down the entire device, file-based encryption uses different keys for non-sensitive and sensitive files. And thanks to Direct Boot, another relatively recent Android feature, encrypted devices can start up with core functionality like alarms, voice calls, and SMS enabled. Sensitive data like user data and third-party apps, meanwhile, stay encrypted until you unlock the device.
If you use a screen lock on your Android smartphone, full-disk encryption is enabled by default.
In summary, a new Android device will not prompt you to enable encryption when you set it up nor will you find a manual toggle in the Settings app. All you need to do is set a screen lock of some kind. Fortunately, this is a rather simple process. Head on over to Settings > Lockscreen and Security and pick a pattern, numbered PIN, or mixed password for your lock screen.
How to encrypt text messages on Android
While your Android phone only needs a lockscreen password or PIN to stay encrypted, that’s not true for other apps on your device. SMS or text messages, for example, do not get any encryption whatsoever by default. Luckily, there are several alternatives to choose from if you’d like a more secure messaging experience:
- Switch to RCS: If your contacts use Android as well, consider switching to Rich Communication Services (RCS) instead of SMS. You can think of RCS as a more modern form of SMS with end-to-end encryption built-in. Best of all, you don’t need to install an app to use it on most phones. The Google Messages app supports RCS right out of the box.
- Use an encrypted chat app: Looking for the most secure solution? Look no further than Signal, the app that prides itself on its robust encryption. In fact, even some of the most popular apps like WhatsApp use Signal’s encryption protocol under the hood. The only downside is that you’ll have to ask your contacts to download Signal (or WhatsApp) on their devices as well.
Encrypt a microSD card on Android
Edgar Cervantes / Android Authority
It’s worth noting that encryption is not enabled by default on external storage like microSD cards. This is because the encryption key lives on the Android device itself, making it impossible to read the microSD card’s data anywhere else or even after a factory reset. Most users don’t anticipate this behavior and expect to be able to move microSD cards between devices freely.
Luckily, many Android OEMs offer a way to encrypt the contents of your microSD card — provided you’re willing to put up with the above limitations.
The exact steps may vary depending on your device’s Android flavor, but generally speaking, you’ll find the option under Settings > Security. Keep in mind that this is a slow process, so you may have to set your device aside for a while. The exact duration depends on the amount of data already present on the microSD card.
Once again, you can only read an encrypted microSD card on the original device. If you intend on performing a factory reset or upgrading your device, remember to manually decrypt it first.
Next steps: How to encrypt photos and files on Android
If your objective is simply to encrypt specific files or photos on your Android device, you’ll have to use a third-party app. Here are a few recommendations for encryption apps:
DroidFS
DroidFS is a free and open-source Android app that allows you to create and browse encrypted virtual volumes. It uses gocryptfs as its underlying encryption scheme, which means that you can access these vaults on any Linux desktop too. The app offers a full-fledged internal file browser, media viewer, and even an internal camera to directly capture and encrypt photos.
You’ll have to use the open-source app store F-Droid to install DroidFS since it isn’t available on the Play Store. Alternatively, you can find more information within the project’s GitHub repository.
Photok
If you specifically need to encrypt images, Photok fits the bill perfectly. It offers a photo gallery-esque view of your files instead of an all-purpose file browser. The app is also open-source and relies on the AES-256 encryption standard. While not as feature-rich as DroidFS, it does offer the ability to create backups.
You can download Photok from the Play Store or the developer’s GitHub repository.
FAQs
No, you don’t need to install anything to encrypt your Android device. Simply enable a screen lock like a PIN, pattern, or password and your phone’s contents will be automatically encrypted for you.
To encrypt a modern Android phone, simply set up a screen lock like a pattern or PIN.
No, an encrypted Android device cannot be hacked. However, if you don’t install the latest security updates, a future vulnerability may allow hackers to bypass the encryption.
Guides
Android Security
Given the information from the article by Edgar Cervantes and Rita El Khoury on Android Authority about encrypting Android devices and related topics, let me provide an in-depth explanation, drawing upon my expertise on the subject.
1. Android Encryption Basics:
- Default Encryption: Newer Android phones come with encryption enabled by default, starting from Android 6.0 Marshmallow. This means that if you set up a lockscreen (pattern, PIN, or password), your device is automatically encrypted.
2. Screen Lock as the Key:
- Setting a Screen Lock: As emphasized, the crucial step to ensure your Android device is encrypted is to set a screen lock. You can do this by navigating to
Settings > Lockscreen and Securityand choosing a pattern, PIN, or mixed password.
3. File-Based Encryption:
- Evolution of Encryption: Android 10 introduced file-based encryption as a newer method. Unlike full-disk encryption, file-based encryption employs different keys for non-sensitive and sensitive files. Core functionalities like alarms, voice calls, and SMS can operate even when the device is encrypted, thanks to Direct Boot.
4. Text Message Encryption:
- Switch to RCS: Rich Communication Services (RCS) offers a modern form of SMS with built-in end-to-end encryption. The Google Messages app supports this feature.
- Encrypted Chat Apps: Signal stands out as a highly secure messaging app. It employs robust encryption protocols and is trusted by many for its security features. WhatsApp also uses Signal's encryption protocol.
5. MicroSD Card Encryption:
- Manual Encryption: While your Android phone's internal storage gets encrypted automatically, external storage like microSD cards does not. To encrypt a microSD card, navigate to
Settings > Security. - Limitations: Once encrypted, a microSD card can only be read on the device where it was encrypted. Before performing a factory reset or switching devices, you should decrypt the microSD card.
6. Encrypting Specific Files and Photos:
- Third-party Apps: For encrypting specific files or photos, you might need third-party apps since Android does not provide native functionality for this.
- DroidFS: An open-source app allowing you to create encrypted virtual volumes. It's compatible with Linux desktops.
- Photok: Specifically designed for encrypting images, Photok offers a gallery view of encrypted files and uses the AES-256 encryption standard.
7. Additional Security Considerations:
- Regular Updates: Ensure your Android device receives regular security updates. While encryption provides a layer of security, vulnerabilities might arise, making it crucial to stay updated to prevent potential bypasses.
- FAQs: Always refer to reliable sources or FAQs regarding Android security. For instance, merely enabling a screen lock encrypts your Android device without needing additional apps.
In summary, Android offers robust encryption tools to secure your device and data. By understanding and implementing the encryption methods mentioned, users can significantly enhance their digital security on Android devices.
