[T-Mobile Galaxy Note 4 General] V3racious:
FULL Disk ENCRYPTION + ROOT Easy steps >>> HOW TO root & encrypt entire device

How to encrypt your rooted device. I wrote these instructions based on my Note 4 (T-Mobile branded N910T3 ) BUT they will work for ANY device!

THE SHORT OF IT:

YOU SIMPLY NEED TO ECRYPT YOUR DEVICE FIRST PRIOR TO ROOTING. YOU CAN ROOT IT AFTER IT IS ENCRYPTED, NOT BEFORE.

tested on Android 4, 5, & 6.

Once you root or install various roms you lose the ability to encrypt your device. This issue manifests itself in the form of either hanging, rebooting, or the animation just sitting there but not actually doing anything when you try to use the full disk encryption feature built into all modern versions of android. Below are the steps on how to get this native encryption feature working while still maintaining your root & favorite rom.

Credit goes to chatty kathy, i mean bruzzy who graciously and verbosely provided instructions on how to encrypt my rooted 12.2" Samsung Galaxy Note Pro (AT&T branded SM-P907A) here: http://xdaforums.com/showthread.php?t=2791587

McFood on androidforums.com also reiterated much of the same here: http://androidforums.com/threads/how-to-encrypt-a-rooted-device.866968/

As usual: Use this guide at your own risk!

Quick Overview:

Unroot if rooted. Encrypt. Reroot. The only thing special is that you have to manually kick start SuperSU when rooting after the encryption is in affect. See steps 12 & 13.

INSTRUCTIONS:

-------------------

0. Make a backup to your external SD card of your entire system FIRST such as a nandroid backup via a custom recovery (Philz Touch, TWRP, etc). I even do modem, etc. just in case you ever need.

1.	Ensure your device is not rooted and also not encrypted (if already rooted, skip to step 3; if already encrypted, decrypt or do a factory-reset - don't try CF-Auto-Root on an encrypted device, it'll soft-brick)

2.	Root the device (I used this sticky: http://xdaforums.com/note-4-tmobile/general/easy-steps-n910t3-dofc-dog1-how-to-root-t3177225 )

3.	Temporarily un-root the device (when using SuperSU: go to Settings and remove the tick at the option "Activate Superuser")

4.	Reboot

5.	Activate the device encryption (the battery must be at least at 80% and the device must be plugged in the wall charger)

6.	The device will restart after a short period of time and start the encryption (this will take some time, but you should see a progress bar indicating how far it is)

7.	After the encryption is finished the device will reboot and ask for the password, just log in

8.	If not yet done, flash a custom recovery where you have console access or can use ADB as root (I used TWRP)

9.	Boot into recovery. (POWER + VOLUME UP + HOME button together at the same time)

10.	Mount /system (it's not mounted automatically, at least not in the version I used - TWRP 2.7.1.0).

11.	Open a console or ADB shell to run the basic linux commands in red in the next two steps on the phone ((In TWRP it is under Advanced & then Terminal Command and start the console in any directory, it doesn't matter, i would choose the root directory / ))

11-continued: Laymans terms: go to Advanced in TWRP and then Terminal Command. Just press select to start shell in the root directory "/ ".

once you are at the prompt you simply type in the commands in red in steps 12 & 13.

12.	Copy the su binary (if you use SuperSU you run this command: cp /system/xbin/daemonsu /system/xbin/su )

13.	Execute the installation (if you use SuperSU run this command: /system/xbin/su --install )

14.	Reboot

15.	Send the NSA a message and tell them to lick your balls. Oh wait nevermind they have a backdoor in AES... FTP = Fukt The Police :cyclops: