Nexus 5 security questions re pattern lock and encryption

[Advait]

Hi All,

I just got my first Android phone, a Nexus 5 and I love it. It has the latest updates. Its not rooted and I have no plans to root. I have a complicated pattern lock using lots of dots. I have some quick security questions.

I googled "how to bypass pattern lock on nexus 5" and found some pages that appear to detail some reasonably easy ways to bypass the pattern lock. So it appears that if my phone was stolen any reasonably good geek could bypass my pattern lock and see all my files. Is that true?

Anyone encounter problems with encrypting their Android phone or Nexus phone? I'm thinking of doing it. I've already install about 20 apps. Will encrypting the phone cause problems? Or is the Android full phone encryption system very stable and reliable?

Approx what % of Android users encrypt their phones? Very few? Most?

I'm now exploring AndroZip to encrypt my few files that need security. So far it looks OK.

Thanks!

Advait

 

[Rxpert83]

I'd be interested in seeing what links you have for that, as many of the old security holes are long gone (as in years ago)

 

[Advait]

I'd be interested in seeing what links you have for that, as many of the old security holes are long gone (as in years ago)

OK, I'll run the search again and post the links.

It seems that you're saying that for a fully up to date phone like the Nexus 5 and the latest Android OS (4.4.2) that its hard to bypass the lock screen if I have a complicated random pattern lock. That's good news. I'm guessing if the Google top Android engineers got their hands on it they could bypass. But it seems you're saying that the average geek would have a hard time bypassing it.

Thanks,

Advait

 

[Rxpert83]

Yes, under certain circumstances with old versions of the OS you can bypass the lockscreens or pattern/pin locks. It usually required USB debugging to be turned on before the phone was locked, but that is rare for a non-rooter to have.

Additionally, the ones I'm aware of were patched around 4.0-4.1

Like I said, I'd still be interested in seeing what you found. Just because I'm not aware of one doesn't mean there isn't one


As far as full phone encryption goes, I'd say it would be a small minority of users who do so. I never personally have

 

[nx1977]

I haven't encrypted as you get a warning about the data only being usable on the device it was encrypted on, and any data transferred to a PC say might not be readable.

Was enough to put me off in case I ever needed a replacement phone and it rendered all my backups useless.

 

[Advait]

I'd be interested in seeing what links you have for that, as many of the old security holes are long gone (as in years ago)

Here's some of the links I found. I'm not a geek so I can't tell if they're still relevant or not. It sounds like something called the ADB is a way to bypass security on some devices.

Recover Android Device in case of Forgot password/pattern unlock an Android device - howik

How To Bypass the Pattern Lock on Any Android Device

I'm getting the impression that the Nexus 5 with the latest version of Android has a lock screen more secure than prior versions. And as long as I'm using a complicated random pattern lock I should be OK.

And I'll make a point to properly encrypt (AndroZip Pro) my few sensitive files and do daily backups.

And I'll pray that none of the cyanogenmod uber-geeks ever steals my phone...

So I feel comfortable with these security steps. I'm totally new to Android so please forgive my newbie questions. Thanks!

Advait

 

[Advait]

I haven't encrypted as you get a warning about the data only being usable on the device it was encrypted on, and any data transferred to a PC say might not be readable.

Was enough to put me off in case I ever needed a replacement phone and it rendered all my backups useless.

Wow! I didn't know that and didn't think of that. I'm glad I didn't encrypt my Nexus 5 cause I'm regularly transferring numerous files back and forth to my Win7 pc.

Thanks for the tip!

 

[Advait]

Yes, under certain circumstances with old versions of the OS you can bypass the lockscreens or pattern/pin locks. It usually required USB debugging to be turned on before the phone was locked, but that is rare for a non-rooter to have.

As a clueless newbie I hearby promise to never turn on USB debugging (whatever that is).

Cheers!

 

[csiemers]

Hi All,
Anyone encounter problems with encrypting their Android phone or Nexus phone? I'm thinking of doing it. I've already install about 20 apps. Will encrypting the phone cause problems? Or is the Android full phone encryption system very stable and reliable?

I've encrypted my phone and have no issues. I'm able to transfer video, music, and photos just fine to my PC.

 

[Rxpert83]

As a clueless newbie I hearby promise to never turn on USB debugging (whatever that is).

Cheers!

Its a setting thats inside of a hidden menu for developers. And those ADB method you found require that setting to be turned on in order to work.

Basically, you're safe

Starting with android 4.3, you have to have previously allowed that specific computer to use USB debugging as well (which requires the phone to be unlocked to do). So even for those of us that have it on, it isnt an issue. :thumbup: