Page 1 of 2 12 LastLast
    Device Encryption - Turn On or Off for Windows 10 Mobile Phone

    Device Encryption - Turn On or Off for Windows 10 Mobile Phone

    How to Turn On or Off Device Encryption for your Windows 10 Mobile Phone

    Published by BrinkCategory: Windows Phone
    13 Jul 2015 Last Updated: 26 Oct 2015 at 17:29

    Published by


    Brink's Avatar
    Administrator

    Posts: 24,390

    Show Printable Version 


    How to Turn On or Off Device Encryption for your Windows 10 Mobile Phone

    information   Information
    Device encryption helps protect your files and folder on your Windows 10 Mobile phone from unauthorized access in case your phone is lost or stolen.

    This tutorial will show you how to turn on or off device encryption for your Windows 10 Mobile phone.





    Here's How:

    1. Open Settings, and tap on System. (see screenshot below)

    Click image for larger version. 

Name:	Windows_10_Phone_device_encryption-1.png 
Views:	851 
Size:	67.6 KB 
ID:	24320

    2. Tap on Device encryption. (see screenshot below)

    Name:  Windows_10_Phone_device_encryption-2.png
Views: 2411
Size:  31.3 KB

    3. Do step 4 (on) or step 5 (off) below for what you would like to do.


     4. To Turn On Device Encryption for your Windows 10 Mobile Phone

    A) Turn on device encryption. (see screenshot below)

    Name:  Windows_10_Phone_device_encryption-4.png
Views: 11262
Size:  29.7 KB

    B) If you haven't already, you will now be taken to add a PIN to your phone. When finished, go to step 6 below. (see screenshot below)
    Note   Note
    Adding a PIN is not required to turn on device encryption, but it is recommended to add a PIN to make your phone more secure.


    Name:  Windows_10_Phone_device_encryption-5.png
Views: 11232
Size:  31.0 KB


     5. To Turn Off Device Encryption for your Windows 10 Mobile Phone

    A) Turn off device encryption, and go to step 6 below. (see screenshot below)

    Name:  Windows_10_Phone_device_encryption-3.png
Views: 11177
Size:  27.1 KB


    6. If you like, tap on the Start button at the bottom of your phone to go back to your Start screen. (see screenshot below)

    Name:  Start.png
Views: 11230
Size:  17.2 KB




    That's it,
    Shawn
  1.    13 Jul 2015 #1
    Join Date : Sep 2014
    Nashville, TN
    Posts : 3,143
    Windows 10 Pro

    Does anyone know if Lumia phones have a TPM Chip? Is this device encryption based on bitlocker? And if so, how does it store the keys?
      My ComputerSystem Spec
  2.    13 Jul 2015 #2
    Join Date : Oct 2013
    Posts : 24,390
    64-bit Windows 10 Pro build 17017
    Thread Starter

    I found this older article below that may help better explain device encryption.

    Device Encryption
    Last edited by Brink; 13 Jul 2015 at 18:46. Reason: update
      My ComputersSystem Spec
  3.    13 Jul 2015 #3
    Join Date : Sep 2014
    Nashville, TN
    Posts : 3,143
    Windows 10 Pro

    No, I think this changed with Windows Phone 8. I've read a few accounts that say that Windows Phone 8 devices are required to have TPM chip.

    Windows Phone 8 has | Network World
      My ComputerSystem Spec
  4.    13 Jul 2015 #4
    Join Date : Oct 2013
    Posts : 24,390
    64-bit Windows 10 Pro build 17017
    Thread Starter

    Good. I haven't seen anything yet that resembles BitLocker on my Lumia 1520 phone with device encryption turned on.
      My ComputersSystem Spec
  5.    13 Jul 2015 #5
    Join Date : Feb 2014
    Posts : 487

    Quote Originally Posted by Mystere View Post
    Does anyone know if Lumia phones have a TPM Chip? Is this device encryption based on bitlocker? And if so, how does it store the keys?
    I am also interested in hearing more details from Microsoft, so I'm not sure whether I'll be able to provide you with any more info than you already know, however a couple of months ago I posted a link to a Channel 9 video from the Ignite 2015 conference, where one of their architects said that it's going to be possible for users to enable Bitlocker device encryption on Windows 10 Mobile. I do not know what encryption Microsoft are using in the above tutorial, so can only go off what Brink says, but you can find the Channel 9 video in the below post:

    Users Will Be Able To Enable Bitlocker on Windows 10 Phone Devices

    The same video also touches on TPM at around 10:00 in, where he mentions "... every Windows Phone has a TPM, every mobile device, even a Stream 7 like this from HP, has a TPM". I'm not sure about Windows 10 Mobile, but at this link it briefly mentions how TPM is implemented on Nokia Lumia Windows Phone 8 phones. Again it's aimed towards IT professionals, as consumers weren't able to enable Bitlocker on their Windows 8 phones.

    How is TPM implemented in Nokia Lumia Windows Phone 8?

    TPM is implemented as a software application running inside the ARM TrustZone-based secure execution environment in the Qualcomm Krait processor. It follows the TCG TPM 2.0 specification.

    In addition to ARM TrustZone, the secure execution environment consists of a small amount of secure RAM and OTP (one time programmable) memory called eFuses, which contain the device unique keys and are accessible only from the TrustZone.

    What is the exact procedure for the encryption and decryption and how are the device encryption keys protected on Nokia Lumia Windows Phone 8 phones?

    Device mass memory encryption and decryption happens using hardware crypto accelerators:

    • The encryption keys are encrypted by the software TPM with the device unique keys and stored into the RPMB (Replay Protected Memory Block) area of the eMMC memory.

    • The keys are decrypted in boot by the software TPM and placed into HW crypto accelerators, which are not accessible for any other purpose than the mass memory encryption.
      My ComputerSystem Spec
  6.    17 Dec 2015 #6
    Join Date : Dec 2015
    Posts : 10
    w10m

    encryption does not appear to work


    I have a Lumia 640 XL, with now Windows 10 Mobile / Phone installed via Insider.

    I see the option to enable encryption and followed the steps above.

    However, *nothing appears to happen*.

    The checked items is On for encryption, but when I look at Settings - System - Storage, it does NOT say that the system is encrypted.

    Also, there is no progress dialog regarding the encryption process. The On/Off toggle for encryption can be changed at will.

    Does encryption even work at all on Windows 10 Mobile / Phone?

    Note: I also connected the phone to an ActiveSync Office365 policy that "requires" encryption. The only thing that happens is that the toggle is now set to On, but again, no progress dialog, no indication in the Storage settings that encryption is enabled or anything.

    Does encryption even work for the SDCARD?

    At this point, I cannot use this device if it is not possible to verify encryption works.
      My ComputerSystem Spec
  7.    17 Dec 2015 #7
    Join Date : Oct 2013
    Posts : 24,390
    64-bit Windows 10 Pro build 17017
    Thread Starter

    Hello xinlifoss, and welcome to Ten Forums.

    When you turn on device encryption, are you able to add a PIN link in step 4?

    Microsoft has just released a new Windows 10 Mobile Insider Preview Build 10586.36 that you might try.

    Announcing Windows 10 Mobile Insider Preview Build 10586.36 - Windows 10 Forums
      My ComputersSystem Spec
  8.    17 Dec 2015 #8
    Join Date : Dec 2015
    Posts : 10
    w10m

    Quote Originally Posted by Brink View Post
    Hello xinlifoss, and welcome to Ten Forums.

    When you turn on device encryption, are you able to add a PIN link in step 4?

    Microsoft has just released a new Windows 10 Mobile Insider Preview Build 10586.36 that you might try.

    Announcing Windows 10 Mobile Insider Preview Build 10586.36 - Windows 10 Forums
    thanks for the tip. yes, the phone did ask if I wanted to set a pin. I tried my tests with the pin set and without a pin set. no difference.

    it took a while, but I finally got this new update installed.

    alas, same pathology:
    • with a local Device Encryption toggled On, no dialog, no change in Storage status
    • with an activesync policy from Google Sync (Google for Work), the Requires Encryption policy is ignored by the device, so the toggle remains Off, yet the device seems to be reporting back to the server that encryption is activated because the data is syncing with the servers
    • with a native Office Enterprise that has a Requires Encryption policy, the settings toggle is moved to On and greyed out so the user cannot disable, the data is syncing immediately, yet the Storage settings do not indicate that the device is encrypted.


    last thing. with windows 8.1r2, the Office Enterprise did seem to set the encryption correctly.

    still puzzled.
      My ComputerSystem Spec
  9.    17 Dec 2015 #9
    Join Date : Oct 2013
    Posts : 24,390
    64-bit Windows 10 Pro build 17017
    Thread Starter

    I'm not sure how to go about testing it, but if it shows device encryption as turned on, it should be.
      My ComputersSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Tutorial Category
Windows Phone Flashlight - Turn On or Off in Windows 10 Mobile Phone
How to Turn On or Off Flashlight in Windows 10 Mobile Phone Windows 10 Mobile Insider Preview Build 10149 for phones now includes a Flashlight quick action button in the Action Center so you can quickly turn your phone’s flash into a flashlight. ...
Tutorials
Windows Phone Turn On or Off Emergency Alerts in Windows 10 Mobile Phone
How to Turn On or Off Emergency Alerts in Windows 10 Mobile Phones Wireless Emergency Alerts (WEA) are emergency messages sent by authorized government alerting authorities through your mobile carrier. Alerts received at the right time can...
Tutorials
Windows Phone Turn On or Off Show more tiles on Start in Windows 10 Mobile Phone
How to Turn On or Off 'Show more tiles' on Start in Windows 10 Mobile for Phones A Tile is an image that represents your app on the Start screen. When Show more tiles is on, Tiles can still be resized and moved as before—except you can now fit...
Tutorials
Windows Phone Change Device Name in Windows 10 Mobile Phone
How to Change the Device Name in Windows 10 Mobile Phones Devices on a network need unique names so they can identify and communicate with each other. If two devices have the same name on the same network, it creates a conflict for network...
Tutorials
Windows 10 Phone - What device are you going to update?
http://tapatalk.imageshack.com/v2/15/02/06/a64d19e6c3a16a06ba11805a14ac3520.png I have a Nokia Lumia 1520 HK variant which I got from Amazon as the 1520 was not released here in Canada. It is SIM-less (unlocked). It was updated (OTA) to 8.1 a...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:10.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums