Page 1 of 2 12 LastLast
    Device Encryption - Turn On or Off for Windows 10 Mobile Phone

    Device Encryption - Turn On or Off for Windows 10 Mobile Phone

    How to Turn On or Off Device Encryption for your Windows 10 Mobile Phone
    Published by
    2015-07-13
    Designer Media Ltd

    Published by


    Brink's Avatar
    Administrator

    Posts: 17,516

    Show Printable Version 


    How to Turn On or Off Device Encryption for your Windows 10 Mobile Phone

    information   Information
    Device encryption helps protect your files and folder on your Windows 10 Mobile phone from unauthorized access in case your phone is lost or stolen.

    This tutorial will show you how to turn on or off device encryption for your Windows 10 Mobile phone.





    Here's How:

    1. Open Settings, and tap on System. (see screenshot below)

    Click image for larger version. 

Name:	Windows_10_Phone_device_encryption-1.png 
Views:	591 
Size:	67.6 KB 
ID:	24320

    2. Tap on Device encryption. (see screenshot below)

    Click image for larger version. 

Name:	Windows_10_Phone_device_encryption-2.png 
Views:	399 
Size:	31.3 KB 
ID:	24321

    3. Do step 4 (on) or step 5 (off) below for what you would like to do.


     4. To Turn On Device Encryption for your Windows 10 Mobile Phone

    A) Turn on device encryption. (see screenshot below)

    Name:  Windows_10_Phone_device_encryption-4.png
Views: 9164
Size:  29.7 KB

    B) If you haven't already, you will now be taken to add a PIN to your phone. When finished, go to step 6 below. (see screenshot below)
    Note   Note
    Adding a PIN is not required to turn on device encryption, but it is recommended to add a PIN to make your phone more secure.


    Name:  Windows_10_Phone_device_encryption-5.png
Views: 9170
Size:  31.0 KB


     5. To Turn Off Device Encryption for your Windows 10 Mobile Phone

    A) Turn off device encryption, and go to step 6 below. (see screenshot below)

    Name:  Windows_10_Phone_device_encryption-3.png
Views: 9118
Size:  27.1 KB


    6. If you like, tap on the Start button at the bottom of your phone to go back to your Start screen. (see screenshot below)

    Name:  Start.png
Views: 9224
Size:  17.2 KB




    That's it,
    Shawn

  1. Joined : Sep 2014
    Posts : 2,923
    Windows 10 Pro
       2015-07-13 #1

    Does anyone know if Lumia phones have a TPM Chip? Is this device encryption based on bitlocker? And if so, how does it store the keys?
      My System SpecsSystem Spec


  2. Joined : Oct 2013
    Posts : 17,516
    64-bit Windows 10 Pro build 15014
       2015-07-13 #2

    I found this older article below that may help better explain device encryption.

    Device Encryption
    Last edited by Brink; 2015-07-13 at 18:46. Reason: update
      My System SpecsSystem Spec


  3. Joined : Sep 2014
    Posts : 2,923
    Windows 10 Pro
       2015-07-13 #3

    No, I think this changed with Windows Phone 8. I've read a few accounts that say that Windows Phone 8 devices are required to have TPM chip.

    Windows Phone 8 has | Network World
      My System SpecsSystem Spec


  4. Joined : Oct 2013
    Posts : 17,516
    64-bit Windows 10 Pro build 15014
       2015-07-13 #4

    Good. I haven't seen anything yet that resembles BitLocker on my Lumia 1520 phone with device encryption turned on.
      My System SpecsSystem Spec

  5.    2015-07-13 #5

    Mystere said: View Post
    Does anyone know if Lumia phones have a TPM Chip? Is this device encryption based on bitlocker? And if so, how does it store the keys?
    I am also interested in hearing more details from Microsoft, so I'm not sure whether I'll be able to provide you with any more info than you already know, however a couple of months ago I posted a link to a Channel 9 video from the Ignite 2015 conference, where one of their architects said that it's going to be possible for users to enable Bitlocker device encryption on Windows 10 Mobile. I do not know what encryption Microsoft are using in the above tutorial, so can only go off what Brink says, but you can find the Channel 9 video in the below post:

    Users Will Be Able To Enable Bitlocker on Windows 10 Phone Devices

    The same video also touches on TPM at around 10:00 in, where he mentions "... every Windows Phone has a TPM, every mobile device, even a Stream 7 like this from HP, has a TPM". I'm not sure about Windows 10 Mobile, but at this link it briefly mentions how TPM is implemented on Nokia Lumia Windows Phone 8 phones. Again it's aimed towards IT professionals, as consumers weren't able to enable Bitlocker on their Windows 8 phones.

    How is TPM implemented in Nokia Lumia Windows Phone 8?

    TPM is implemented as a software application running inside the ARM TrustZone-based secure execution environment in the Qualcomm Krait processor. It follows the TCG TPM 2.0 specification.

    In addition to ARM TrustZone, the secure execution environment consists of a small amount of secure RAM and OTP (one time programmable) memory called eFuses, which contain the device unique keys and are accessible only from the TrustZone.

    What is the exact procedure for the encryption and decryption and how are the device encryption keys protected on Nokia Lumia Windows Phone 8 phones?

    Device mass memory encryption and decryption happens using hardware crypto accelerators:

    • The encryption keys are encrypted by the software TPM with the device unique keys and stored into the RPMB (Replay Protected Memory Block) area of the eMMC memory.

    • The keys are decrypted in boot by the software TPM and placed into HW crypto accelerators, which are not accessible for any other purpose than the mass memory encryption.
      My System SpecsSystem Spec


  6. Joined : Dec 2015
    Posts : 10
    w10m
       2015-12-17 #6

    encryption does not appear to work


    I have a Lumia 640 XL, with now Windows 10 Mobile / Phone installed via Insider.

    I see the option to enable encryption and followed the steps above.

    However, *nothing appears to happen*.

    The checked items is On for encryption, but when I look at Settings - System - Storage, it does NOT say that the system is encrypted.

    Also, there is no progress dialog regarding the encryption process. The On/Off toggle for encryption can be changed at will.

    Does encryption even work at all on Windows 10 Mobile / Phone?

    Note: I also connected the phone to an ActiveSync Office365 policy that "requires" encryption. The only thing that happens is that the toggle is now set to On, but again, no progress dialog, no indication in the Storage settings that encryption is enabled or anything.

    Does encryption even work for the SDCARD?

    At this point, I cannot use this device if it is not possible to verify encryption works.
      My System SpecsSystem Spec


  7. Joined : Oct 2013
    Posts : 17,516
    64-bit Windows 10 Pro build 15014
       2015-12-17 #7

    Hello xinlifoss, and welcome to Ten Forums.

    When you turn on device encryption, are you able to add a PIN link in step 4?

    Microsoft has just released a new Windows 10 Mobile Insider Preview Build 10586.36 that you might try.

    Announcing Windows 10 Mobile Insider Preview Build 10586.36 - Windows 10 Forums
      My System SpecsSystem Spec


  8. Joined : Dec 2015
    Posts : 10
    w10m
       2015-12-17 #8

    Brink said: View Post
    Hello xinlifoss, and welcome to Ten Forums.

    When you turn on device encryption, are you able to add a PIN link in step 4?

    Microsoft has just released a new Windows 10 Mobile Insider Preview Build 10586.36 that you might try.

    Announcing Windows 10 Mobile Insider Preview Build 10586.36 - Windows 10 Forums
    thanks for the tip. yes, the phone did ask if I wanted to set a pin. I tried my tests with the pin set and without a pin set. no difference.

    it took a while, but I finally got this new update installed.

    alas, same pathology:
    • with a local Device Encryption toggled On, no dialog, no change in Storage status
    • with an activesync policy from Google Sync (Google for Work), the Requires Encryption policy is ignored by the device, so the toggle remains Off, yet the device seems to be reporting back to the server that encryption is activated because the data is syncing with the servers
    • with a native Office Enterprise that has a Requires Encryption policy, the settings toggle is moved to On and greyed out so the user cannot disable, the data is syncing immediately, yet the Storage settings do not indicate that the device is encrypted.


    last thing. with windows 8.1r2, the Office Enterprise did seem to set the encryption correctly.

    still puzzled.
      My System SpecsSystem Spec


  9. Joined : Oct 2013
    Posts : 17,516
    64-bit Windows 10 Pro build 15014
       2015-12-17 #9

    I'm not sure how to go about testing it, but if it shows device encryption as turned on, it should be.
      My System SpecsSystem Spec


 
Page 1 of 2 12 LastLast


Similar Threads
Tutorial Category
Flashlight - Turn On or Off in Windows 10 Mobile Phone
How to Turn On or Off Flashlight in Windows 10 Mobile Phone Windows 10 Mobile Insider Preview Build 10149 for phones now includes a Flashlight quick action button in the Action Center so you can quickly turn your phone’s flash into a flashlight. ...
Tutorials
Emergency Alerts - Turn On or Off in Windows 10 Mobile Phones
How to Turn On or Off Emergency Alerts in Windows 10 Mobile Phones Wireless Emergency Alerts (WEA) are emergency messages sent by authorized government alerting authorities through your mobile carrier. Alerts received at the right time can...
Tutorials
Start - Show more tiles - Turn On or Off in Windows 10 Mobile
How to Turn On or Off 'Show more tiles' on Start in Windows 10 Mobile for Phones A Tile is an image that represents your app on the Start screen. When Show more tiles is on, Tiles can still be resized and moved as before—except you can now fit...
Tutorials
Device Name - Change in Windows 10 Mobile Phones
How to Change the Device Name in Windows 10 Mobile Phones Devices on a network need unique names so they can identify and communicate with each other. If two devices have the same name on the same network, it creates a conflict for network...
Tutorials
Windows 10 Phone - What device are you going to update?
http://tapatalk.imageshack.com/v2/15/02/06/a64d19e6c3a16a06ba11805a14ac3520.png I have a Nokia Lumia 1520 HK variant which I got from Amazon as the 1520 was not released here in Canada. It is SIM-less (unlocked). It was updated (OTA) to 8.1 a...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 21:57.
Find Us
Twitter Facebook Google+



Windows 10 Forums