University of Alberta

Login Sign up

Fully Encrypt a Samsung Android Device

Modified on: Fri, 30 Aug 2024 12:21 PM

Introduction

In some cases, Samsung Android devices may not be considered fully encrypted by the Duo Mobile app used for Multi-factor Authentication (MFA) or by mobile device management software even though encryption is enabled. This article provides information for Samsung Android device users looking to ensure their device is fully encrypted and meets encryption requirements. 


Applicability

This article is intended for anyone who uses a Samsung Android 8 or newer mobile device. Samsung devices running Android 7 or older are unsupported, and should be updated or replaced if they are being used to access University data or accounts.

The issue addressed in this article may apply to other Android devices that aren't considered encrypted and do not require a PIN/Password/Pattern on startup, however the steps to enable it may be different for other Android device manufacturers. Other Android device owners should refer to their device manufacturer for information on how to setup a PIN/Password/Pattern on startup.


Procedure

In order for a Samsung Android device to be fully encrypted, it must require a PIN, password, or pattern authentication ON STARTUP. This setting is referred to as Secure Startup or Strong Protection depending on the version of Android. If Secure Startup or Strong Protection is not enabled, these devices use a default password for encryption and aren't considered fully encrypted. Enabling Secure Startup or Strong Protection on your device will ensure your device is fully encrypted using a custom encryption PIN/Password/Pattern.

Note that requiring a PIN/Pattern/Password/Biometrics on the lock screen is different from requiring a PIN/Pattern/Password on startup. It is possible to have a PIN/Pattern/Password enabled for the lock screen, while not have a PIN/Pattern/Password enabled on startup.  

Enable Secure Startup on Android 8/9/10 Samsung Devices

  1. On your mobile device open your Settings, tap on the magnifying glass search icon and search for Secure Startup
    1. On most Samsung devices you will find the Secure Startup setting under either the Biometrics and security or Lock Screen and Security menus
  2. Tap Secure Startup
  3. Change this setting to Require PIN when device powers on and select Apply
    NOTE: On some versions of Android this setting may be to require a pattern or password instead which is equivalent.
  4. Follow the on-screen instructions to set a PIN

Enable Strong Protection on Android 11 Samsung Devices

  1. On your mobile device open your Settings, tap on the magnifying glass search icon and search for Strong Protection
    1. On Android 11 Samsung devices you will find Strong Protection setting under Biometrics and security > Other security settings
  2. Tap Strong Protection
  3. Toggle this setting to ON
  4. Follow the on-screen instructions to set a PIN

Important! The PIN/Password/Pattern that you set will be required each time you reboot or startup your device. Make sure you do not forget this code!

If further assistance is required, please contact IST.

Was this answer helpful?