yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] 00Ghz:
I opened a similar thread. It is possible to do however it seems people just don't care about the security risk.

Xda app
[Android Q&A, Help & Troubleshooting] bbgmp:
Surely this must be a concern to people. It certainly is for me.
[Android Q&A, Help & Troubleshooting] ItsDace:
+1
[Android Q&A, Help & Troubleshooting] k1ng440:
+1

i also wondering about this.
[Android Q&A, Help & Troubleshooting] Break Action:
+1

We need it!
[Android Q&A, Help & Troubleshooting] GuestK00233:
-1 this is pointless. someone could just go into download mode or fastboot and reflash the recovery.
[Android Q&A, Help & Troubleshooting] mightyiam:
What we're looking for is a password protected bootloader which will require password for booting into recovery or using download mode or fastboot.
[Android Q&A, Help & Troubleshooting] zelendel:
Good luck as it would need to boot before anything else and we can see the issues with this. There will never be a fool proof way to lock your phone if lost. It will be as simple as loading up the bootloader and flash a stock rom which will wipe the recovery.

No there is not alot of interest in this as to be honest if the info you have on your phone is that important then its simple. Don't loose your phone.
[Android Q&A, Help & Troubleshooting] mightyiam:
Perhaps you think I'm talking about an app. No, I'm talking about a modified bootloader.
[Android Q&A, Help & Troubleshooting] azam426:
I read somewhere that samsung galaxy s have that option..
[Android Q&A, Help & Troubleshooting] masiminder:
+1

a bootloader with password setting is one of the few things i'm missing.
[Android Q&A, Help & Troubleshooting] -Tiz-:
+1

We either need a password protected bootloader + CWM.

Or fulldisk encryption a la Whispercore.

I absolutely HATE the insecure concept of Android. Android is for kids and nerds. But not for serious people.
[Android Q&A, Help & Troubleshooting] Shmarkus:
+1

if it is not being made, I'll look into it myself :)
[Android Q&A, Help & Troubleshooting] unihumi:
+1

Would be awesome!

/edit: There's also this old thread: http://xdaforums.com/showthread.php?p=6182586

/edit2: And here: http://xdaforums.com/showthread.php?p=19314088
[Android Q&A, Help & Troubleshooting] GuestK0045:
Plus 1 I like 2 see this bootloader password
[Android Q&A, Help & Troubleshooting] AJMetal87:
Yes please

+ 1

I'm glad I'm not the only one wondering about this. I'm sure it would have been done if it was possible by now. Nqmobile + gotta! App is almost good enough for me, but a password protected bootloader would be a sick addition :-)
[Android Q&A, Help & Troubleshooting] face-t:
+I

It is one of the questions bothering me for last few months.

I like all those sec. apps - but Android Lost, Call Back, TouchMyLife nor Avast! Lost will not be able to save me if someone will boot straight into CWM and flash it with whatever just to get rid of the "FindIt" stuff.
[Android Q&A, Help & Troubleshooting] pileot:
cool

i too would like to see a passworded bootloader, or even a passworded version of CWM.

Think about it: how many regular joes on the street know how to flash a phone, or put it into download mode. Im a samsung guy, i know how to put it into download mode. My buddy is an iPhone guy, he wouldnt know the first place to start. An HTC guy might know how to deal with a few HTC devices, but in reality a handfull of people who MIGHT find your phone MIGHT know how to thwart that sort of 'security'.

From a lost phone aspect: Samsung dive is impressive. Found my phone location to within a few houses. with GPS and Wifi off. as long as the phone has battery life and is turned on, i can find it. Unless someone wipes it. which takes my password. Or boots into CWM and wipes it that way.... which currently does not need a password. or uts it into download mode and flashes a new firmware, which knowing my phone is just asking for issues. In reality, i want someone to boot my phone and have to have it on in the state that i lose it and NOT reset it. That yeilds the highest possibility of me finding it again.

So yes, i realize that any security we put on here could be thwarted somehow, but by who? how much time and effort are they going to put into it aside from trying a reset and it fails, trying to reboot into recovery, passworded protected, turn it off and sell it on the street, when the next guy turns it on with their sim card (texts my google account the new number) and now i can get his name and address

what are the chances the guy who finds my phone is going to have a computer handy and know exactly how to flash the phone? Not high.

Definately +1 for passworded protected CWM.
[Android Q&A, Help & Troubleshooting] face-t:
Huge chances. Anytime, everywhere.

You don't need to know anything, apart from taking battery off.

And placing back when you got tools ready. This simply means, lost phone will never again boot into normal android os. Never.
[Android Q&A, Help & Troubleshooting] logic5:
if my phone or tablet got stolen and the thief formatted the device or flashed a new ROM with download mode then I am screwed,,

if the bootloader is protected then no matter what the thief do ,, I will find my device.

please developers do this please.
[Android Q&A, Help & Troubleshooting] pileot:
Not everyone knows how to flash every type of phone. The meathod for flashing a samsung is different than an HTC. And there is a certian level of know how. Sure anyone can take out the battery or turn the phone off but aside from that the general public does not always know anything to do beyond that.

Basically, the point is nothing is perfect but having SOME ability to lock out the phone is better than NO ability to lock out the phone.
[Android Q&A, Help & Troubleshooting] Jorgitosms:
Bootloader Password + Recovery Password + Cerberus installed as System

Bootloader Password + Recovery Password + Cerberus installed as System APP with fixed configuration would be the way to be able to recover the phone. The thief has 3 chances:

- Throw it through the window, as it is not possible to format it.

- Do a Wipe from Settings menu and use it normally (that's why Cerberus or similar should be as System app and must keep the configuration)

- Sell it... but this is nothing against our possibilities to recover it!

BTW, do you really think that "professional" phone thiefs don't know how to wipe and flash mainly all devices in the market?!?! If you think that way... let me say you are dreamer... they are experts, and they get a lot of money from our phones!

So I vote... YES, let's develope it. I would buy such a solution!
[Android Q&A, Help & Troubleshooting] nerotNS:
While this is true you can't expect that all thieves know how to use recovery bootloader and adb.At least not in my country.And avast saved me twice since I saved it hard reset proof
[Android Q&A, Help & Troubleshooting] ckeller52:
So my 9 year old son is allowed to use his mother’s EVO for entertainment value and basically it’s her backup phone anyway. Last Sunday he got to the Bootloader menu through the reboot menu in CyanogenMod 7 and reset the phone. I’ve been looking for a solution to not being able to password this menu and I think I’ve found it. I have FaceLock Premium and Lookout Premium installed on this phone. With FL I just use the pin not the facial recognition to lock down specific apps and system functions I don’t want him to get into. In CGM 7 I went to Settings/CyanogenMod settings/Interface and unchecked Power prompt. This eliminates the menu option that offers up recovery and bootloader. And since its pin protected he can’t get to it. If it gets lost or stolen I’m hoping the pin protection will get me enough time to get to a PC to locate the phone and if that doesn’t work I’ll just erase the beast and call it a day.

I also have Titanium backup syncing a backup to DropBox every night so I can just restore to a new phone if necessary.

Oh and as for the cost of a lost or stolen phone. I have BOA transfer $20 every week into a savings account I set up just for this eventuality or if a new phone comes out that I must have. <g> It adds up quickly.
[Android Q&A, Help & Troubleshooting] dabotsonline:
If you have a PIN-secured screen lock, how would it be possible for a thief to enter the Settings menu?

From my understanding, the following is a workaround, but even this could be defended against by using the password-protected custom recovery proposed in this thread.

"[Hack] remove a lockscreen pin via adb with sqlite3" (by PAulyhoffman):

"There are a couple other ways posted for folks who have forgotten lockscreen password or pattern, but this methods REMOVES the PIN. for pattern and password follow other methods

This method requires root access and debugging enabled.

*if debugging is not enabled it can be done from any custom recovery

-reboot recovery and follow code"

http://xdaforums.com/showthread.php?t=1409304
[Android Q&A, Help & Troubleshooting] AlanB412:
Making a password locked recovery sounds easy enough assuming someone here has the knowhow to make a recovery. A password locked bootloader sounds way harder though, that seems like you'd have to mod the bootloader for each phone to get that option, and from what I can tell modding bootloaders is no easy business.

+1 to this though, maybe if enough people ask for it they might add it in as an option on CWM or 4ext.
[Android Q&A, Help & Troubleshooting] Mysticales:
Id be all for this personally. Those of us who know how to flash wont worry, we can bypass. However for the AVG dumb user (not to mention carriers), they would be prevented from doing anything. That would be ideal. I support this idea. +1
[Android Q&A, Help & Troubleshooting] kuisma:
Only me finding this thread extremely amusing? :)

What you are talking about, is already invented. The manufacturers had exactly this problem shipping lots of Android devices to the consumers. They wanted to protect the boot loader to avoid the users f**k the device up totally, generating lots of expensive support.

So they did. They made sure only protected images was accepted by the boot loader. This is the "locked bootloader" you guys worked to hard to circumvent.

With some creative hacking it's of course possible to take the standard locked boot loader, replace the manufacturers certificate with your own, and voila - now the boot loader only accepts YOUR images, no one else's. The phone is locked ... but you've got the key.

If course, this would prevent you from flashing all custom ROMs as well. ;) Still possible to fix, by implementing a signing procedure in the custom flash tools, signing whatever you'll flash on-the-fly with your own signature.
[Android Q&A, Help & Troubleshooting] SachinShekhar:
It won't help.

Anyone can flash ROM over USB with download mode. Interestingly, only recovery/bootloader can also be flashed..

So, you'd need a password protected download mode, too.
[Android Q&A, Help & Troubleshooting] dz2k:
it would be nice to have password protected boot/recovery modes. i dont lose many phones and i dont think that i would get my s3 back if lost. someone could easily figure out how to get to those modes.
[Android Q&A, Help & Troubleshooting] Mysticales:
Another thought if you cant do bootloader/recovery password.. while it is not "ideal" Maybe Rom makers could make it where when you boot it up, the initial setup screen requires a password in order for it to continue.
[Android Q&A, Help & Troubleshooting] tsirhcitna:
Very intesting, I've wrote an email to twrp developer, I'll see what they answer...
[Android Q&A, Help & Troubleshooting] brdeveloper:
Anybody still there?

I'm new to the Android world and I'm pretty comfortable in the anti-theft/anti-loss area with my Macbook.

Basically, it has FileVault enable, firmware password protection preventing the theft from overwriting my OSX installation and Undercover software with a few guest accounts allowing theft playing on the laptop so I can take pictures, screenshots and log his input.

However, I didn't find a similar way for protecting my Galaxy Note from reflashing its ROM through Download/CWM mode. An Undercover-like solution isn't possible since Android doesn't support multiple user accounts, so I must allow the theft play with my own personal data so he'll think the device is unsecured. For critical apps like Gmail main account and Gtalk, I could install and app that asks for password. The Settings menu could be protected this way too.

Currently, all of my protection is limited to Samsung Dive and Android Lost, but any junior technician in the suburban area can learn how to reflash my GNote with a brand new stock ROM. Looks like iPhone or even Nokia (because of its non-mainstream status these days) are better provided with recover options, am I wrong?
[Android Q&A, Help & Troubleshooting] HDdarkmantis:
+1
[Android Q&A, Help & Troubleshooting] gd6noob:
So.. whats the new update on this??!?!

Would be good to have a password protected Bootloader....
[Android Q&A, Help & Troubleshooting] supershinobi:
I don't know if this was answered but In 4.2.2 in security setting there is an encryption feature that requires password on boot. Still doesn't deal with thief getting into recovery by keeping power button pushed and selecting recovery menu.
[Android Q&A, Help & Troubleshooting] wymers24:
Fast boot

That won't keep a thief from formatting it but that is a much better solution for everyone in the meantime. That way, the thief doesn't get to look at your information.

I believe I have found a solution to this for everyone who owns a HTC One. Under the "Power" tab in the settings, there is something called "Fast boot". I do not believe that this makes it impossible to get into hboot but it makes it much tougher
[Android Q&A, Help & Troubleshooting] BonBon916:
+1!!!!!!!

I am so glad I am not the only one wanting/longing for this feature. Very important secuirty breach for me. Please update us!
[Android Q&A, Help & Troubleshooting] andstein85:
Everyone looking for a true anti-theft solution should just get the Galaxy s4 and wait for Absolute Software to officially release its app for it. It's essentially LoJack for Android that has been implemented at the firmware level and cannot be removed with any kind of factory reset or hard wipe. Only available for the Galaxy S4 at the moment but most manufacturers will likely be implementing this in their new devices in the future.

More info:

http://www3.absolute.com/lojackforlaptops/android
[Android Q&A, Help & Troubleshooting] zelendel:
This still will not block a flash from the boot loader. As the OP is looking for.

Wayne Tech Nexus
[Android Q&A, Help & Troubleshooting] stryke69:
+1 for a lockable bootloader
[Android Q&A, Help & Troubleshooting] nerotNS:
I think, all things considered, that it is impossible to completely make the device immune. Plus it would be very VERY bad if you forgot the password, as you would have no way of re entry. I think, while practical, this idea has many downsides.
[Android Q&A, Help & Troubleshooting] brdeveloper:
I still think it would be a good compromise, making stealing of most devices worthless.
[Android Q&A, Help & Troubleshooting] nerotNS:
Perhaps but there is always a way if nothing else then by Heimdal or JTAG. There is always some security hole that we can't patch out.
[Android Q&A, Help & Troubleshooting] caveman102:
You forgetting one thing

Not everyone is capable of coding and much less get into recovery without google not everyone know how to google correctly unless you are a smart guy most of thieves dont even know how to use a computer correctly much less know how to use adb and all we looking for at least me is make it harder for them to sell if they cant get into recovery to erase previous owners info taking advantage of that the phone can be located once on and they always turn it on i live in nyc where most of those who be stealing phone to sell dont even know how much they even worth and sell them for 50-100 to make quick money for drug in most cases i have friend with a phone stores and i have seen an android with lock recovery
[Android Q&A, Help & Troubleshooting] zelendel:
As long as there is access to the bootloader there is no 100% secure way. As for your comment about the thieves not knowing about google or things like this. You are a bit off base. They have been raiding all types of 2nd hand cell shops all over the world that deal in stolen phones and they do everything from wiping the device to changing the IMEI (which makes black listing pointless) not Even apple or Blackberry (the 2 most secure platforms) are immune. As long as things are computer based there will be ways to bypass it. The last 2 stores that were closed had almost a dozen Jtag riggs they used.
[Android Q&A, Help & Troubleshooting] caveman102:
deal thoe

I know what u saying i agree with u but when u make it a bit harder is a bit harder to find those store that has the power to do such thing like i say when they take those stolen phones to my friends shop who they call yeap me if we make it harder for them to steal something is not about stealing is about making it so when they go sell all they get for the phone is 2-3 bucks the more work i do in the shop the more i charge
[Android Q&A, Help & Troubleshooting] :
So is this possible yet?
[Android Q&A, Help & Troubleshooting] nerotNS:
You are very wrong on that part. You see, thieves (at least in Europe) aren't as stupid as they were, even the most basic ones do know how to exploit the knowledge found on the internet, not to mention the rapidly growing number of the sofisticated ones, who have quite a lot of knowledge on doing things such as an IMEI change (rendering the black list/search methods) pointless, and you can find the recovery instructions on the first 3 links of a Google search of "*insert phone model here* recovery". Also JTAG is rather cheap and most thieves actually sell the phones for their real price. That's how things are here, I don't know for other parts of the world.

---------- Post added at 04:02 AM ---------- Previous post was at 03:11 AM ----------

No
[Android Q&A, Help & Troubleshooting] :
You'd think cwm touch or twrp would give you the option, its funny no ones thought of this as a possibility yet.
[Android Q&A, Help & Troubleshooting] demkantor:
Again, having a recovery password protect would only stop a small (if any) portion of thieves. Having a password protected bootloader (as in not allowing a phone to even boot into recovery let alone os) would stop a slightly larger chunk.

But as noted a few posts back if stolen phoned make it to the proper places in the black market then nothing will stop them from erasing and selling a fresh phone with a new imei etc

The tools for JTAG have become super cheap, I bought a 3 dollar UART cable to go along with some other tools I already had (and made) with the limited knowledge I have plus the internet at hand I'm sure it wouldn't take me too long to figure out how to reformat the full works on just about any phone.

I'm not saying I know all or that I'm apt to do such a thing but I'm sure there are thousands out there more talented then me and would lack the morals to just this.

Point being, nothing will ever be perfect, if government, corporations, and just about evert consumer keeps making it so possible to disregard these issues and so easy for criminals to continue this is just something we all need to live with.

But yes, a password protected recovery and bootloader would be nice, may persuade a couple common crooks to rob a McDonalds instead
[Android Q&A, Help & Troubleshooting] caveman102:
Around here thieves = dump person
[Android Q&A, Help & Troubleshooting] caveman102:
Nyc thief = no school or computer knowledge

Nyc stolen iphone 5 sell for a max of 100 bucks and you know i**** i mean iphone is one of the most expensive phones out there
[Android Q&A, Help & Troubleshooting] gabrielpc1190:
The problem is not the thief

You are not thinking about the person who will buy the phone. That person will be able to take it to a shop and there could be a person with time and tools (and being paid) to try unlock it....

At least locking the recovery could motivate thief to turn the phone on again to look for a way to reset it and that is when we can locate it.

TWRP could have a password option to make a little harder to wipe it. Maybe when you try to wipe or install a new rom it can ask for a password to continue, like the way it ask you to swype to continue...

+1 to recovery password
[Android Q&A, Help & Troubleshooting] Pojiku:
Most recoveries use the linux kernel, which is why Aroma installer ect is possible, so I don't see any reason why a password prompt couldn't be easily added.
[Android Q&A, Help & Troubleshooting] beckzz:
+1

im interested, too
[Android Q&A, Help & Troubleshooting] brdeveloper:
That is the case in USA where most smartphones are REALLY inexpensive. As a counter-example, in Brazil a brand new iPhone 5 16GB costs no less than USD 1000,00. A stolen iPhone 5 would probably be sold for anything between $300 to $400. Furthermore, subsidies usually are not better than buying an unlocked phone at retailers. In other words, stealing phones can be a big business in other countries...
[Android Q&A, Help & Troubleshooting] GabrialDestruir:
It would be nice if you could somehow password protect fastboot, recovery, download mode, etc. while leaving the phone able to boot into OS naturally. This would prevent most people from just being able to circumvent the OS security measures by flashing or wiping the device. I get that there would most likely be ways to circumvent even a protected bootloader, but if they're going to go so far as to hardware hack the device (such as jtag or w/e) to unlock it, the way I see it is have the damn thing. By the time they actually go that far chances are the device is going to be wiped via remote security anyways if it's passing between 2 or 3 people and you haven't gotten it back yet.

Short of a professional phone thief snatching your phone and immediately setting to work on it, you'll have a chance at recovery or wiping for security. You could probably even go so far as to wipe data and throw the OS into bootloop by trashing system files making the device unusable short of a new flash (which would become extremely difficult for people who aren't using hardware hacks to flash it).

The whole argument that a thief is "dumb" or doesn't know how to boot into recovery/fastboot/download mode of every device only goes so far. If they're even slightly computer literate 5 minutes on the internet can tell you how to completely wipe -insert device name-. They would have to have practically no technology experience to not have the slightest idea of how to find information on wiping a device.

Though that's just my opinion.
[Android Q&A, Help & Troubleshooting] felipepx:
3 steps to a anti-theft Android:

1- Password on bootloader to block the downloader mode and recovery mode;

2- Disable the Power Menu in lockscreen to block to power-off in the stolen phones;

3- Not-removable battery in phones.

+1, I need this.
[Android Q&A, Help & Troubleshooting] lalo20:
+1 devs please help us.
[Android Q&A, Help & Troubleshooting] nerotNS:
If i were a thief I'd remove the SIM card prior turning it on. That way no wipe without WiFi.