unlocked bootloader / user data

[bobby janow]

Hello,

Do you have OEM unlock enabled?

I have an unlocked bootloader and i usually leave OEM unlock enabled. This way, when i wipe clean and want to test some features or modifications, i simply reinstall and can skip the setup part.

If OEM unlock is disabled, you'll have to add the same account used before the phone has been wiped.

Is that what you were referring to?

Cheers...

Yes, that's what I was referring to. I cannot toggle the OEM unlock switch I have a Verizon model. So the account you refer to is my Google account right? What I'm assuming at this point is that if I wipe my device in bl menu, factory reset, then on bootup I would have to log in with my Google account before ... before what? Before it will boot up? I've never had a locked device so I don't know, I always toggled it before I did almost anything. One more assumption if I'm correct so far, I can't give my phone away unless I delete the account on the device? I don't even know how to do that I've never done it and never had to.

So this is what they mean when they say FRP lock? Ok I just read about it and see that is what you need to do before you reset the device. It seems like a theft protection mechanism. So first get rid of all Google accounts on the phone then reset and you're free? Yes, I also saw that if you have the oem lock switch enabled you don't need to do this. Wow, another reason to keep the device locked if you are concerned about your data.

 

[TonikJDK]

You can't get rid of the Google accounts no matter what you do to bypass frp. They are in an area that we can't touch. There is no bypass for frp currently, and has not been one for some time.

You guys are debating what is more secure. Fort Knox with a fence or Fort Knox without. The encryption is Fort Knox and it is hard as heck to get past, but doable. The addition of a locked bootloader is added security certainly but if you lose physical control of your phone your data is toast, if the bad guy wants it bad enough.

 

[5.1]

Yes, that's what I was referring to. I cannot toggle the OEM unlock switch I have a Verizon model. So the account you refer to is my Google account right? What I'm assuming at this point is that if I wipe my device in bl menu, factory reset, then on bootup I would have to log in with my Google account before ... before what? Before it will boot up? I've never had a locked device so I don't know, I always toggled it before I did almost anything. One more assumption if I'm correct so far, I can't give my phone away unless I delete the account on the device? I don't even know how to do that I've never done it and never had to.

So this is what they mean when they say FRP lock? Ok I just read about it and see that is what you need to do before you reset the device. It seems like a theft protection mechanism. So first get rid of all Google accounts on the phone then reset and you're free? Yes, I also saw that if you have the oem lock switch enabled you don't need to do this. Wow, another reason to keep the device locked if you are concerned about your data.

Hey,

If you factory reset or wipe clean like fastboot -w or flash a factory image, you'll have to add the account you previously used on the phone when you reboot. Just like when the phone is brand new, you add your account during setup...


If you plan to sell your device or give it to someone, you'll have to remove it yes. When the FRP showed up, many people bought locked devices...

My Pixel was locked by the way. Bought it used on eBay. It was advertised as:

"powered the phone just to see if it works"

So the idea of FRP didn't even cross my mind. Got the package from DHL at 1PM. Opened the box and powered the phone. I was happy, but my smile didn't last long. Got to the setup screen and it said:

Phone got resetted, you need to log in with the account previously used on the phone.

E-mailed the seller on eBay, talked with him on the phone. He indeed used it a few hours and even logged with.his account. As we were speaking he did a factory reset from his Google account again thinking it would solve the issue...

I asked him how can we arrange the situation? At first, he was reluctant to provide his Google account and wanted me to return the device. This was unacceptable for me, since I just gave my N6P to my wife.

So he finaly agreed and told me he'd call back in the evening. Indeed he called me back with his password, which he just changed to something much easier i guess. And guess what? This is the second trap of the FRP. If you factory reset and change your Google account password, you have to wait another 24 hours to log into your phone.

From here I started to think I've been scammed, lol... So, again we decided to call each others 24h later. I can assure you i was sweating. But finally it worked... :angel:



If you.want more details about how to properly remove your account, someone on the N6P forum made a thread especially for this case: https://forum.xda-developers.com/nexus-6/general/guide-properly-prepare-nexus-6-resale-t3104504

When I test stuff I leave my OEM unlock enabled. Once I'm done, I disable it...

Cheers...

 

[bobby janow]

You can't get rid of the Google accounts no matter what you do to bypass frp. They are in an area that we can't touch. There is no bypass for frp currently, and has not been one for some time.

You guys are debating what is more secure. Fort Knox with a fence or Fort Knox without. The encryption is Fort Knox and it is hard as heck to get past, but doable. The addition of a locked bootloader is added security certainly but if you lose physical control of your phone your data is toast, if the bad guy wants it bad enough.

So how do you sell the phone if you can't get rid of the Google account?

And how is your data toast if bootloader is locked?

Sent from my Pixel using XDA-Developers Legacy app

 

[bobby janow]

If you.want more details about how to properly remove your account, someone on the N6P forum made a thread especially for this case: https://forum.xda-developers.com/nexus-6/general/guide-properly-prepare-nexus-6-resale-t3104504


Cheers...

Link didn't work on the xda app but does on the computer. 2 years old but I guess it still works that way. I've never removed a Google account from the device but I'm sure I can figure it out. I'll bet it throws up all kinds of warnings though. Anyone ever done it? Would that be under 'clear app data'?

 

[pcriz]

So how do you sell the phone if you can't get rid of the Google account?

And how is your data toast if bootloader is locked?

That's the other guys problem lol

 

[bobby janow]

That's the other guys problem lol

That was funny! Except the "other guy" is my wife.

 

[5.1]

That's the other guys problem lol

You are wicked...

Link didn't work on the xda app but does on the computer. 2 years old but I guess it still works that way. I've never removed a Google account from the device but I'm sure I can figure it out. I'll bet it throws up all kinds of warnings though. Anyone ever done it? Would that be under 'clear app data'?

Hey, once you are done with removing your account, you factory reset, etc, reboot and let your wife login with her account. Once she's in, it's ok. It's her phone with her account :good:

Cheers...

 

[bobby janow]

You are wicked...



Hey, once you are done with removing your account, you factory reset, etc, reboot and let your wife login with her account. Once she's in, it's ok. It's her phone with her account :good:

Cheers...

Got it thanks. My only question at this point is where do you remove the account? I've never had to do that. I'm sure I can figure it out when I need to do it .. maybe. I just don't see a "remove your Google account from this device" option. I see some delete all Google account activity from all your devices but that looks scary. This shouldn't be that hard.

 

[5.1]

Got it thanks. My only question at this point is where do you remove the account? I've never had to do that. I'm sure I can figure it out when I need to do it .. maybe. I just don't see a "remove your Google account from this device" option. I see some delete all Google account activity from all your devices but that looks scary. This shouldn't be that hard.

Hello,

Not hard at all.

Settings > accounts > Google > go in Google account > 3 dot menu > remove account...

Also... You know if you just want to give her your phone, go in security, delete pin/pattern lockscreen, go in account, remove it, factory reset from recovery. Boot to system, add her account and setup her preferences. Done...

Simple as that...

Cheers...

 

[bobby janow]

Hello,

Not hard at all.

Settings > accounts > Google > go in Google account > 3 dot menu > remove account...

Also... You know if you just want to give her your phone, go in security, delete pin/pattern lockscreen, go in account, remove it, factory reset from recovery. Boot to system, add her account and setup her preferences. Done...

Simple as that...

Cheers...

Ok that's it, thanks. Embarrassingly I was trying it on my 5x which has Android O and it's a little different but I found it there too with your guide. Ok all set now.. When is the Pixel 2 shipping? She needs a new device, her S5 is a little long in the tooth. Back on topic, I'm pretty sure I'll be stuck with a locked bootloader again since I'll probably buy it from Verizon on black Friday. That's if I can get it for under $300 again on the upgrade.

Thanks again.. we should make this a sticky. hehe

 

[5.1]

Ok that's it, thanks. Embarrassingly I was trying it on my 5x which has Android O and it's a little different but I found it there too with your guide. Ok all set now.. When is the Pixel 2 shipping? She needs a new device, her S5 is a little long in the tooth. Back on topic, I'm pretty sure I'll be stuck with a locked bootloader again since I'll probably buy it from Verizon on black Friday. That's if I can get it for under $300 again on the upgrade.

Thanks again.. we should make this a sticky. hehe

Hey,

Ah... As you can see, it's not as hard as it seems at first sight.

The Pixel 2 or whatever they will call it should be released this autum.

Yeah you will likely end up an updated version. Though there have been some users who received phone shipped with 7.1.1 who were able to unlock it. Maybe Verizon was out of stock and shipped Google version with their software on top? Who knows, maybe you'll have a good surprise?!

Cheers...

 

[bobby janow]

Hey,

Ah... As you can see, it's not as hard as it seems at first sight.

The Pixel 2 or whatever they will call it should be released this autum.

Yeah you will likely end up an updated version. Though there have been some users who received phone shipped with 7.1.1 who were able to unlock it. Maybe Verizon was out of stock and shipped Google version with their software on top? Who knows, maybe you'll have a good surprise?!

Cheers...

I'll assume by the time Pixel 2 rolls out we'll have Android O or at the very least all devices shipping with 7.1.2. I don't expect to be able to unlock it if I get it from Verizon. The thing is I really don't care. I'm not unlocking these days or flashing anything. The only thing I miss is the ability. If for some reason I wanted to go back to a previous version I could unlock the bl and flash a full system image. You can't do that if you're locked. I would then relock it and turn off the oem switch. I haven't needed that ability yet with the Pixel, not that there would be anything I could do about it anyway. I had the opportunity to depixel8 but decided against it since I couldn't relock it back and forth.

But that's why I have my trusty 5x so I can flash and play. As a matter of fact I just wiped O and went back to 7.1.2 stock. Didn't even have to wipe my Google account with oem unlock switched on.

 

[5.1]

I'll assume by the time Pixel 2 rolls out we'll have Android O or at the very least all devices shipping with 7.1.2. I don't expect to be able to unlock it if I get it from Verizon. The thing is I really don't care. I'm not unlocking these days or flashing anything. The only thing I miss is the ability. If for some reason I wanted to go back to a previous version I could unlock the bl and flash a full system image. You can't do that if you're locked. I would then relock it and turn off the oem switch. I haven't needed that ability yet with the Pixel, not that there would be anything I could do about it anyway. I had the opportunity to depixel8 but decided against it since I couldn't relock it back and forth.

But that's why I have my trusty 5x so I can flash and play. As a matter of fact I just wiped O and went back to 7.1.2 stock. Didn't even have to wipe my Google account with oem unlock switched on.

Hey,

I agree Android has improved to a point I could nearly live with a locked bootloader... But I still need a few things:

A few cosmetic changes
Black theme
Adaway
Color control
Better apps permission manager (AppOps was better than the current one)
Ability to backup and restore things like EFS (no baseband issue...)

Hopefully, manufacturers will start shipping perfectly calibrated screens, Google will add a native black theme and a proper Ad blocker (very unlikely...) and I guess I could live locked. Now, we can even disable system apps...

Am I asking too much?

Cheers...

 

[bobby janow]

Hey,

I agree Android has improved to a point I could nearly live with a locked bootloader... But I still need a few things:

A few cosmetic changes
Black theme
Adaway
Color control
Better apps permission manager (AppOps was better than the current one)
Ability to backup and restore things like EFS (no baseband issue...)

Hopefully, manufacturers will start shipping perfectly calibrated screens, Google will add a native black theme and a proper Ad blocker (very unlikely...) and I guess I could live locked. Now, we can even disable system apps...

Am I asking too much?

Cheers...

Not an unreasonable list. I know ad blocking is paramount to a lot of people. There really is nothing like Adaway however I have found a decent alternative although it does have its drawbacks. Take a look if you have time. Works unrooted and locked.
https://forum.xda-developers.com/android/apps-games/app-dns66-source-host-ad-blocker-root-t3487497

 

[robchow]

Great discussion; it gave me a better understanding of the how an unlocked bootloader affects access to user data. My initial concern, after the phone is lost or stolen, was that an unlocked bootloader would allow "easy" access to user data by simply installing custom rom (via the -w in fastboot). I am glad to see that isn't the case. The bottom line is to use encryption; though it is not 100% foolproof it will at least require effort to decrypt. Being an "average Joe," I hope that effort won't come to fruition as "I am a nobody" (i.e., not worthwhile to try).

Thank you for bring up the Factory Reset Protection (FRP) discussion. Now I (and hope others) know what to do (remove google account(s) and use the phone's factory reset) before selling/giving the phone away.