Sample demonstrating how to store data in a device-encrypted storage which is always available while the device is booted both before and after any user credentials(PIN/Pattern/Password) are entered.
This sample demonstrates how to store and access data in a device encrypted storage which is always available while the device is booted. Starting from Android N, the system provides two storage locations for user data:
-
Credential encrypted:
- The default storage location for all apps, available only after the user has entered their pattern/password
-
Device encrypted:
- A new storage location which is always available while the device is booted, both before and after any user credentials are entered
Apps can mark individual components as being encryption aware which indicates to the system that they can safely run when Credential encrypted storage is unavailable (an encryption aware component primarily relies on data stored in the new Device encrypted storage area, but they may access Credential encrypted data when unlocked) by adding encryptionAware="true" in the manifest.
<activity|provider|receiver|service ...
android:encryptionAware=”true”>
Components marked as encryption aware are normal components that will continue to be available after the Credential encrypted storage becomes available. The storage APIs on the Context supplied to these components will always point to Credential encrypted storage by default. To access Device encrypted storage, you can create a secondary Context using this API
Context.createDeviceEncryptedStorageContext()
All of the storage APIs on this returned Context will be redirected to point at Device encrypted storage.
You need to be careful what data is stored/migrated to a device-encrypted storage because the storage isn't protected by the user's credential (PIN/Pattern/Password) You shouldn't store sensitive data (such as user's emails, auth tokens) in a device-encrypted storage.
- Android SDK Preview N
- Android Build Tools v24.0.0 rc1
- Android Support Repository
This sample uses the Gradle build system. To build this project, use the "gradlew build" command or use "Import Project" in Android Studio.
- Google+ Community: https://plus.google.com/communities/105153134372062985968
- Stack Overflow: http://stackoverflow.com/questions/tagged/android
If you've found an error in this sample, please file an issue: https://github.com/googlesamples/android-DirectBoot
Patches are encouraged, and may be submitted by forking this project and submitting a pull request through GitHub. Please see CONTRIBUTING.md for more details.
Copyright 2016 The Android Open Source Project, Inc.
Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.