Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,728,638 Members 54,361 Now Online
XDA Developers Android and Mobile Development Forum

[Q] How to enable Fingerprint Scanner with full device encryption??

Tip us?
 
androidpleb
Old
#1  
Junior Member - OP
Thanks Meter 0
Posts: 3
Join Date: Apr 2014
Question [Q] How to enable Fingerprint Scanner with full device encryption??

Hi,

I bought the Samsung Galaxy S5 and the fingerprint reader works reasonably well (as in it works, nothing in comparison to apple though, so don't buy it for the fingerprint reader ) for unlocking the screen...

However its a work requirement that my phone has full device encryption, as phones are regularly stolen where I travel.... it seems when I enable encryption I lose the ability to use the fingerprint reader to unlock the phone .... I bought this hoping that I could avoid having to type in my complex password just to unlock the screen, as I got so tired of doing that with my S2

Is there any mods to enable finger print reader screen unlock + full device encryption at boot time for the Galaxy S5 yet? ... I saw some references to pattern unlock / pin with device encryption... but I would think the fingerprint reader is different...

Thanks!
 
tkchumly
Old
#2  
Junior Member
Thanks Meter 1
Posts: 1
Join Date: Apr 2014
Default S5 Full disk encryption with fingerprint unlock

I also have this question. I believe on the Nexus 5 it at leasts lets you use face unlock with full device encryption. And I read on one article that you should be able to do this but i do not think the author actually tried this. I will say from my own personal experience that you can infact decrypt the device after encrypting it without doing a complete wipe of the device and you can restore the use of fingerprints to unlock your phone. It seems like for security minded people this would be a great feature but if it is unable to be used with full device encryption it seems a little pointless to me. Being forced to use a PIN or password to use encryption is a big pain point for android users who want some type of security.
The Following User Says Thank You to tkchumly For This Useful Post: [ Click to Expand ]
 
androidpleb
Old
#3  
Junior Member - OP
Thanks Meter 0
Posts: 3
Join Date: Apr 2014
Yes I can't believe that no one has really complained about this yet - but I guess encryption isn't' that important to people as I imagined
 
fighter_foo
Old
#4  
fighter_foo's Avatar
Senior Member
Thanks Meter 41
Posts: 122
Join Date: Oct 2008
Quote:
Originally Posted by androidpleb View Post
Yes I can't believe that no one has really complained about this yet - but I guess encryption isn't' that important to people as I imagined
I am having the same pain, as I use my S5 for BYOD.

It makes no sense when you can use fingerprint to make payments with paypal but not unlocking the phone when it is encrypted.

Hope Samsung can enable this feature in next update.
The Following User Says Thank You to fighter_foo For This Useful Post: [ Click to Expand ]
 
sorphin
Old
#5  
Member
Thanks Meter 2
Posts: 33
Join Date: Dec 2009
I'd like this too.. as well as, the iPhone has a cydia app (that a friend of mine showed me), that you can basically disable the power button from turning off the phone while it is fingerprint locked. That would definately be nice to have on the S5 (since it's done through an app). That would have stopped the person who stole my wife's S4 from turning it off when it was blasting the locator ring at them!
 
deduction
Old
#6  
Member
Thanks Meter 39
Posts: 97
Join Date: Oct 2010
Location: Phoenix Metro
Quote:
Originally Posted by sorphin View Post
I'd like this too.. as well as, the iPhone has a cydia app (that a friend of mine showed me), that you can basically disable the power button from turning off the phone while it is fingerprint locked. That would definately be nice to have on the S5 (since it's done through an app). That would have stopped the person who stole my wife's S4 from turning it off when it was blasting the locator ring at them!
I can't believe that the fingerprint sensor can't be used if encryption is enabled whatsoever. I could understand the iPhone model, requiring a pin before a fingerprint can be used, but by disabling fingerprint lockscreen, boot unlock, and SD unlock, the fingerprint sensor is now wholly useless for convenience.

It's too trivial to extract data from an unencrypted Android. By not supporting encryption with a measure of covenieve, I don't see the point in including a fingerprint sensor whatsoever given the current software limitations.

Please, someone, figure out what sqlite/settings need to be changed so we can make decent use of our phones fingerprint sensor.
InfoSec expert by day, phone hacker by night
 
fabiokino
Old
#7  
Junior Member
Thanks Meter 0
Posts: 6
Join Date: Feb 2010
After some experiments, i found out a procedure to enable FDE and fingerprint lockscreen. Root is required (or at least I guess, I didn't try with a non-rooted system...).
These are the steps:
1) set up fingerprint lockscreen
2) with a root explorer, go to /data/system folder, and backup locksettings.db, locksettings.db-shm and locksettings.db-wal to sd card
3) set up password lockscreen
4) encrypt the device
5) when encryption is done, restore the backed-up files to /data/system: you should have fingerprint lockscreen again (no reboot needed, just turn the screen off, and magically the password should be vanished )

CAVEAT 1: with my system configuration, I wasn't able to encrypt the device directly: the encryption procedure started, but after reboot nothing happened, the device just booted normally. I don't know the exact reason, in some forums they suppose that it happens on kitkat when the device is rooted. I was able to bypass the problem only adding these steps to the procedure:
...
3b) with TWRP, backup the /system partition, and restore the stock non-rooted /system
4) encrypt the device
4b) restore the original rooted /system partition
...
I don't know if steps 3b) and 4b) are always necessary, let me know...
If you need these steps, don't worry if before restoring your custom /system partition the encryption password isn't recognized, just restore the partition and all will work fine
CAVEAT 2: once encrypted, I didn't find a way to unencrypt the device, because the unencrypt ion procedure starts, but after reboot the device is still encrypted, similar to what described in caveat 1. I tried to replace the /system partition with the stock one, but the encryption password was no longer recognized.
CAVEAT 3: the current TWRP (2.7.1) isn't able to mount S5 encrypted data partition, and restoring an image made with online nandroid backup doesn't seem to work either. So, if you want to make an image of your phone (and I suggest to do it ), do it before encryption

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


XDA PORTAL POSTS

Easily Combine Text and Manage Your Android Clipboard with StuffMerge

Android clipboard management has always been impractical without the … more

Pale Moon Browser Ported to Android

Having a wide choice of third party applications is one of the most beautiful things that Android has to … more

Partial Android Wear Source Uploaded to AOSP

2014 is certainly shaping up to be theyear of the wearables. And thanks to its innovative … more