yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy Nexus] scandiun:
Sure you will have to do it. In order to allow phone encryption you need to set a password with at least 6 characters with at least 1 number. And of course everytime you unlock the screen or restart the phone you will have to enter that password.

There is no sense to have an encrypted phone and unlock as easy as slide, if your phone is stolen it will make your day.
[Samsung Galaxy Nexus] nrgaway:
Thanks for the info.

I do wish I could use a really simple password for the lock screen though

and have a stronger password just on boot. It can be made very secure this way by powering off the phone with three unsuccessful attempts when unlocking phone. By turning off the phone after the three failed attempts, you would now be required to enter the full stronger password on boot.

Well, maybe its time I learn to hack the ROM :)
[Samsung Galaxy Nexus] segv11:
How about use a nice strong password for encryption and lockscreen, but then use Tasker to take a keyguardlock when you are in a secure location (for example home, as identified by connected WiFi BSID) so that you don't have to enter the password when you are someplace safe?
[Samsung Galaxy Nexus] netmasta10bt:
Here is output from a GNEX

Checking if adb is available... found Android Debug Bridge version 1.0.29

Looking for a device in recovery mode... found 0146xx5Bxx01F011

Getting kernel config... could not load config, skipping checks

Getting /proc/crypto... ok

Checking if 'aes' is available... ok

Checking if 'sha256' is available... ok

Checking if 'cbc(aes)' is available... ignoring

Checking if dmsetup exists... not found

Installing dmsetup binary... 3169 KB/s (279644 bytes in 0.086s)

Checking if dmsetup exists... binary found

Checking dmsetup permissions... success

Checking dmsetup version... lib: 1.02.74 (2012-03-06), driver: 4.20.0

Getting partition config... found 3 partitions:

cache -> /cache (ext4), ignoring

system -> /system (ext4), ignoring

userdata -> /data (auto), potentially encrypted

Trying to mount /data... error -> probably encrypted

Checking if userdata has a crypto footer... not found, looking in /efs

Checking /efs mount point... not mounted

Looking into /etc/fstab... not listed

Looking into /etc/recovery.fstab... not listed

Looking into /proc/mtd... not listed

error

Could not find the device that is mounted to /efs.
[Samsung Galaxy Nexus] TheShoura:
Holy hell I am so happy I made this topic

Rereading all the progress going on, its nice to see that its come this far :D Looks like I may be able to use encryption regularly soon :D
[Samsung Galaxy Nexus] efrant:
I'm just happy to pop in and stare at your avatar for a while. :D
[Samsung Galaxy Nexus] makelegs:
The TWRP recovery solution has made that script unnecessary. Encrypted and flashing FTW!!!
[Samsung Galaxy Nexus] scandiun:
The ability to use different passwords for the encryption and the lockscreen, plus the ability to set number of unsuccessful attempts is not implemented on Android.

There are not implemented as well other features like locking the bootloader on unlocked bootloaders like the SGS2 has.

You can't for the previous reasons. The device administrators set the minimum requirements for screen unlocking and won't allow other software use less secure ways.

http://developer.android.com/guide/topics/admin/device-admin.html

http://support.google.com/a/bin/answer.py?hl=en&answer=1056433
[Samsung Galaxy Nexus] TheShoura:
Just because I know everyone loves these, including me

copyright: I own this picture and do not want anyone redistributing it. Mainly because I don't want the balloon owner sending me a C&D. Enjoy.
[Samsung Galaxy Nexus] makelegs:
My screen unlock and decryption codes do not have to match.
[Samsung Galaxy Nexus] scandiun:
No, the system doesn't use your password as the encryption key, but rather for encrypting the encryption key that is independently generated.

Anyhow the first encryption key (your password) is single and forces you to use it for everything.
[Samsung Galaxy Nexus] efrant:
Dude, you're killing me! :D
[Samsung Galaxy Nexus] fbiryujin:
Will this TWRP allow removal of the encryption? (Ie: permanent decryption) thanks
[Samsung Galaxy Nexus] makelegs:
No....it merely allows password decryption to mount partitions.

If I'm not mistaken...in order to decrypt your phone, you have to truly format system and data...(or maybe just data)...as opposed to a simple wipe.
[Samsung Galaxy Nexus] fbiryujin:
Thanks for the response. Will this TWRP allow formatting of the data partition after mounting/unlocking it? Thanks
[Samsung Galaxy Nexus] makelegs:
you're over thinking this. It allows you to do everything you would normally expect to do in recovery (and then some, compared to CWM). The inky think that's important, here, is that it actually allows you to decrypt. New keyboard implementation is gradually allowing more keyboard functions such as renaming files and backups.
[Samsung Galaxy Nexus] fbiryujin:
I see. The only reason I'd be interested in permanent decryption is if I decide to give the phone to a family member or if I decide I no longer need it. Plus I like being able to reverse anything I do since GNex is now barred from sake in the U.S.
[Samsung Galaxy Nexus] makelegs:
Un-encrypting any phone will likely require adb. It's not relevant to any one particular custom recovery.
[Samsung Galaxy Nexus] fbiryujin:
Ah OK. "fastboot oem lock" then "fastboot oem unlock" will decrypt/wipe the Google Play model of the GNex?
[Samsung Galaxy Nexus] efrant:
No, but this will: fastboot erase userdata
[Samsung Galaxy Nexus] fbiryujin:
Awesome. I'm saving that info
[Samsung Galaxy Nexus] scandiun:
But, provided that you are logged to the encrypted partition? Or even that isn't necessary? I mean if it's necessary to know the password.
[Samsung Galaxy Nexus] segv11:
In fastboot you are not "logged into" anything: no filesystems are mounted, and the framework its not loaded.

The "fastboot erase" command just blows away the partition; it doesn't care what is on it. Think formatting a drive on a PC.
[Samsung Galaxy Nexus] scandiun:
And after "fastboot erase userdata" no other partition needs to be updated nor any other file modified, that's the whole of it?
[Samsung Galaxy Nexus] efrant:
Like what segv11 said, "fastboot erase" is essentially a format command. You can format any of the following partitions: boot, system, userdata, recovery, cache