Fully Encrypt a Samsung Android Device

Introduction

In some cases, Samsung Android devices may not be considered fully encrypted by the Duo Mobile app used for Multi-factor Authentication (MFA) or by mobile device management software even though encryption is enabled. This article provides information for Samsung Android device users looking to ensure their device is fully encrypted and meets encryption requirements.

Applicability

This article is intended for anyone who uses a Samsung Android 12 or newer mobile device. Samsung devices running Android 11 or older are unsupported, and should be updated or replaced if they are being used to access University data or accounts.

The issue addressed in this article may apply to other Android devices that aren't considered encrypted and do not require a PIN/Password/Pattern on startup, however the steps to enable it may be different for other Android device manufacturers. Other Android device owners should refer to their device manufacturer for information on how to setup a PIN/Password/Pattern on startup.

Procedure

In order for a Samsung Android device to be fully encrypted, it must require a PIN, password, or pattern authentication ON STARTUP. This setting is referred to as Strong Protection or Device Protection depending on the version of Android. If Secure Startup or Strong Protection is not enabled, these devices use a default password for encryption and aren't considered fully encrypted. Enabling Secure Startup or Strong Protection on your device will ensure your device is fully encrypted using a custom encryption PIN/Password/Pattern.

Note that requiring a PIN/Pattern/Password/Biometrics on the lock screen is different from requiring a PIN/Pattern/Password on startup. It is possible to have a PIN/Pattern/Password enabled for the lock screen, while not have a PIN/Pattern/Password enabled on startup.

Enable Secure Startup on Android 12+ Samsung Devices

On your mobile device open your Settings, tap on the magnifying glass search icon and search for Device Protection
1. On most Samsung devices you will find the Device Protection setting under Security and Privacy > Advanced Protection
Tap Device Protection
Select Turn On. You may be required to restart your device.
NOTE: On some versions of Android this setting may be to require a pattern or password instead which is equivalent.
Follow the on-screen instructions to set a PIN if necessary

Important! The PIN/Password/Pattern that you set will be required each time you reboot or startup your device. Make sure you do not forget this code!

If further assistance is required, please contact IST.