Database Users

[Q] Android, 2 step verification and the lockscreen

I'm thinking of buying this phone and it will be my first Android phone ever.
When you first set up an Android phone it asks you to sign into your Gmail, all well and good, I have a Gmail and have it protected with 2 step verification.
Now normally on any other device/client you would set up an 'application specific password' which I assume will work aOK in for setting up your Android phone.
But as I understand if you have a lockscreen passcode/pattern lock, if you forget the code/pattern you are asked sign in with your Gmail account password to unlock the phone. This is where it confuses me, you would not normally write down an application specific so if you signed into your phone with one that wouldn't work, or does it work if you use your normal 'non specific' Gmail password?
I have also looked and found this video (watch?v=Mu9xflbwMKw can't post links) which says when you are asked to sign in to Gmail you have a 'menu/settings' option which allows you to sign in with a web interface therefore using a one time use code they send you, which then I assume if you forget your lockscreen code/pattern, you would just sign in with your normal Gmail password.
So if you have 2 step verification do you sign in with your normal password with the 'web login' or do you use a one time use password? and what are the implications for a forgotten lockscreen code/pattern?

I would say the worst case scenario is you have to go create a new one-time password on your computer, just to unlock.

AFAIK you'll have to use your Application-specific password.

Just tried it and it did take my password just fine, however it did "deauthorize" the device, so i had to login once more to make the device sync again.

FISKER_Q said:
Just tried it and it did take my password just fine, however it did "deauthorize" the device, so i had to login once more to make the device sync again.
Click to expand...
Click to collapse
That's fantastic news, I'll just log in with an application specific password knowing that I can reset it with the normal password, I've never (touch wood) forgotten a lockscreen passcode but it's better to be safe than sorry.
Thanks guys :good:

disable 2step autorization. My dad could not login to his his Gmail while it was enabled, but he could login immediatly after disabling it

mazdarati2 said:
disable 2step autorization. My dad could not login to his his Gmail while it was enabled, but he could login immediatly after disabling it
Click to expand...
Click to collapse
That doesn't have anything to do with what we are discussing here. And is 2-step prevented your dad from logging into Gmail, then you're using it wrong.
I've been using 2-step authentication for over two years now, and my wife over a year, on all our computers and phones. Works perfectly.

Clarkster said:
That doesn't have anything to do with what we are discussing here. And is 2-step prevented your dad from logging into Gmail, then you're using it wrong.
I've been using 2-step authentication for over two years now, and my wife over a year, on all our computers and phones. Works perfectly.
Click to expand...
Click to collapse
yes it works everywhere. but it didn't when you want to enter your Gmail after you did a reset on your phone, strangely

That's what the one-time passwords are for. You can't use the 2-step code check with the accounts system on Android. So you create a one-time password, following the directions Google gave you when you turned 2-step on.

[Q] Encrypted Nexus 10. Decrypt worked twice and no longer accepts pin.

I have a Nexus 10. I wanted to add my corporate email to the device. When I did I was told I had to add a pin number and encrypt the device. I performed both of these actions no problem. I rebooted the device twice during all of this and was able to enter my pin successfully and use the device.
Fast forward to this afternoon. After using the device for awhile I determined that the slowness caused by the encryption was no longer worth having my corporate account on the device.
I go into Settings and delete the corporate account. I tried to go into Security to remove the pin and encryption but both were greyed out. I thought all I had to do was reboot the device and I would be able to disable both.
I rebooted and now I'm stuck at the "Type password to decrypt storage". My pin no longer works on this screen. It keeps giving me a response of "Try again."
Does anyone know what's going on or how I can fix this?

I'm guessing the security is messed up (somehow, don't know how) from removing the corporate account.
But, just for future reference, the only way to remove encryption from an Android device is to factory reset it. It's not as simple as just going into security and removing encryption.
Sent from my Nexus 7 using xda premium

squshy 7 said:
I'm guessing the security is messed up (somehow, don't know how) from removing the corporate account.
But, just for future reference, the only way to remove encryption from an Android device is to factory reset it. It's not as simple as just going into security and removing encryption.
Sent from my Nexus 7 using xda premium
Click to expand...
Click to collapse
I heard and seen otherwise. I was shown, by someone who has a Nexus 10, that you can remove the encryption as long as you remove the account and removed the device from the OWA site.
Unfortunately, that person is no longer available to me to help.
So basically I'm screwed and all of my information on the device is gone. No one else has any thoughts?

Well, your data is probably lost, but you can easily factory reset it from recovery.

Skullpuck said:
I heard and seen otherwise. I was shown, by someone who has a Nexus 10, that you can remove the encryption as long as you remove the account and removed the device from the OWA site.
Unfortunately, that person is no longer available to me to help.
So basically I'm screwed and all of my information on the device is gone. No one else has any thoughts?
Click to expand...
Click to collapse
I think you can skip the password via adb. http://forum.xda-developers.com/showthread.php?t=1800799

lKBZl said:
I think you can skip the password via adb. http://forum.xda-developers.com/showthread.php?t=1800799
Click to expand...
Click to collapse
Unless I misread, or misunderstood it looks like that'll only work for *pattern* unlock not pin.
Edit: Nevermind, it looks like this post in that thread might have your answer:
http://forum.xda-developers.com/showpost.php?p=30285850&postcount=12
To the OP, if it's a simple pin, a brute force script or program could make short work of it in minutes (or hours at most; depending on length of password).

Skullpuck said:
I heard and seen otherwise. I was shown, by someone who has a Nexus 10, that you can remove the encryption as long as you remove the account and removed the device from the OWA site.
Unfortunately, that person is no longer available to me to help.
So basically I'm screwed and all of my information on the device is gone. No one else has any thoughts?
Click to expand...
Click to collapse
You saw a way to remove certificates for your corporate email account, not remove encryption from your device.
There is only one way to remove device encryption, and that is by factory reset, by design. It wouldn't be very secure otherwise.

Skullpuck said:
I heard and seen otherwise. I was shown, by someone who has a Nexus 10, that you can remove the encryption as long as you remove the account and removed the device from the OWA site.
Unfortunately, that person is no longer available to me to help.
So basically I'm screwed and all of my information on the device is gone. No one else has any thoughts?
Click to expand...
Click to collapse
Sorry, you heard wrong, or you were listening to a fruitcake. By definition you cannot "remove" encryption. It changes the whole file.
Think of it like this. I just scrambled an egg. Then I'm like "oh no! I don't like scrambled eggs! Can someone help me remove the scramble?"
It's not that easy. Sure, there is brute force, if your apps were THAT important it might be worth it to try.
But the short solution: factory reset your data, or give it the pin it wants.
Swiped from my Nexus 10 using xda-developers app

In the future, NEVER use the corporate account system built into iphone / android, this let's your company apply security policies that can wipe your device remotely, and your encryption junk. Use something like Touchdown app which still syncs your contacts, emails, and calendar into your device for any other app to use, but the security policies only get applied to Touchdown. I know this from experience when my former company's IT department "accidentally" wiped everybody's devices messing around in Exchange. "Whoops."

[Q] Can't login with TapaTalk 2.4.11

Hey guys I'm trying to use the mentioned TapaTalk to access this forum, however it doesn't remember my login information properly.
First access is ok, but when I return I receive an error that I have entered a wrong username and password. From then on I'm not able to login any more, even when entering the correct details. Tapatalk just returns an empty screen.
This means I have to remove each account and add it again every time I want to access a forum. Does anyone have a similar problem? I've tried to re-install, but to no avail.

You don't need to log in to tapatalk to use the app. Just find xda developers and log in to xda.
Sent from my Nexus 4 using Tapatalk 2

scream4cheese said:
You don't need to log in to tapatalk to use the app. Just find xda developers and log in to xda.
Sent from my Nexus 4 using Tapatalk 2
Click to expand...
Click to collapse
Sorry I supposse I wasn't very clear. I'm trying to log in to xda and it works on my first visit to the forum. But when I close the application and return later, I receive a notification that I've entered a wrong username and password and when entering the right credentials it just responded with the same error, but most often simply with an empty screen.
I'm only able to login after I have removed the xda account. (or any other forum)

Can't login using Tapatalk as well
I have the same problems. I've opened xda-forum with tapatalk. I insert my login and password klick send and nothing happens. I'm definite not logged in.
What can I do?

Can't login with TapaTalk 2.4.11
Yes I am having the same issue here. I can see the forum, I login, nothing happens. I know I am not logged in because I cannot post any replies. It also states that I have to see the forum administrator? Who would that be?

Finally logged into tapatalk. So good to go now!
Tapatalk on GSIII

Bypass Exchange Security?

Anyone figured out how to bypass Exchange security on the G2?
Thanks!

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Would like to know this too. In the meantime search for an xposed mod. Notification mod. This one allows you to use the notification pulldown.
Helps a lot.
Sent from my LG-D802 using Tapatalk

Anyone? Please?

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Did you try new Google KitKat email app? Make sure that you install both Email and Exchange 2 email apk.
http://androidcommunity.com/nexus-5...s-android-4-4-google-apps-downloads-20131101/

the easy answer is to use enhanced email, can be found in Google Play. I am using that myself

alex72 said:
Did you try new Google KitKat email app? Make sure that you install both Email and Exchange 2 email apk.
http://androidcommunity.com/nexus-5...s-android-4-4-google-apps-downloads-20131101/
Click to expand...
Click to collapse
I think the OP like me wants to bypass the security set by the rules, not the app itself.
henrylar said:
the easy answer is to use enhanced email, can be found in Google Play. I am using that myself
Click to expand...
Click to collapse
Best most money on an app spent!.... NOT...DOESN'T WORK IN MY CASE...
And you know 15 minutes are not enough to even try it due to the options and testing and hoping. Bought it long ago. In my case it didn't work...
Company has its own app. And another 2 apps checking if the app is admin etc.
Only thing that could be done is either to input the pass automatically when I unlock the phone. Maybe something via xposed. And add a second screen unlock option.
Somewhat like the iPhone jailbreak has it...loved the security bypass plus android pattern unlock....
Sent from my LG-D802 using Tapatalk

Can someone try this? Saw it in company forums. But might be completely unrelated https://play.google.com/store/apps/details?id=ru.chunky.AutoKeystore&hl=en

I use touchdown so the policy is applied to the app and not the device.
Sent from my LG-D803 using XDA Premium 4 mobile app

PAGOT said:
I think the OP like me wants to bypass the security set by the rules, not the app itself.
Best most money on an app spent!.... NOT...DOESN'T WORK IN MY CASE...
And you know 15 minutes are not enough to even try it due to the options and testing and hoping. Bought it long ago. In my case it didn't work...
Company has its own app. And another 2 apps checking if the app is admin etc.
Only thing that could be done is either to input the pass automatically when I unlock the phone. Maybe something via xposed. And add a second screen unlock option.
Somewhat like the iPhone jailbreak has it...loved the security bypass plus android pattern unlock....
Sent from my LG-D802 using Tapatalk
Click to expand...
Click to collapse
It depends obviously then on how the exchange server is configured. In my case e-email bypasses the security demands from the exchange server completely. When I had my HTC sensation, I used a mod you can find in the HTC sensation development, search for exchange - there is also something about using it with other phones.

see this post for files/kudos: http://forum.xda-developers.com/showpost.php?p=47063058&postcount=406
however, you don't need to push via ADB or anything:
1) uninstall your current email and exchange apks (via titanium backup or something similar)
2) either wipe dalvik cache or delete the associated email and exchange odex files in /data/dalvik-cache
3) install the 2 APKs (i usually install exchange first, then email)
4) setup your email
been working perfectly for me for the past week.
EDIT: this is the new 4.4 email/exchange, btw, with the gmail-style interface. it's fantastic.

I would really like to find a way to dodge the lockscreen and other policies that are enforced by Exchange. I don't want to use the KK email.

I use an app called Keystore Unlocker from the play store...must be rooted. You can skip the step adding a VPN and it will still work.
Sent from my VS980 4G using xda app-developers app

tlbland0426 said:
I use an app called Keystore Unlocker from the play store...must be rooted. You can skip the step adding a VPN and it will still work.
Sent from my VS980 4G using xda app-developers app
Click to expand...
Click to collapse
Can you explain the process? I've got the app and have it set up but I'm not entirely sure that I understand what it's doing...
The policies are still in place.

w0rdie said:
Can you explain the process? I've got the app and have it set up but I'm not entirely sure that I understand what it's doing...
The policies are still in place.
Click to expand...
Click to collapse
If you are just trying to get past the pin/password requirement this app stores it so you don't have to enter it when unlocking your phone. Not sure if it works for PIN security but it works for PASSWORD security.
Follow these steps:
1. Open app and click on Credentials store password (enter your lockscreen password)
2. Click Try to unlock
3. Check Auto Unlock
4. Click VPN w/o password for >=4.0
5. On the next screen click on # 3. Press Here (to remove phone lock)
That should do it and remove the lockscreen password that exchange forces you to use.

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Have you tried simply increasing the lock timer to, say, 30 min?
I find I don't often have to enter the PIN with it set high like this.

vween said:
Have you tried simply increasing the lock timer to, say, 30 min?
I find I don't often have to enter the PIN with it set high like this.
Click to expand...
Click to collapse
I still want it to lock. I just want to use the pattern instead of the pin and that's not possible with the Exchange policy.

Soundchasr said:
I still want it to lock. I just want to use the pattern instead of the pin and that's not possible with the Exchange policy.
Click to expand...
Click to collapse
Have you tried buying your IT department Mt Dew and Pizza?

w0rdie said:
I would really like to find a way to dodge the lockscreen and other policies that are enforced by Exchange. I don't want to use the KK email.
Click to expand...
Click to collapse
real quick- you do realize that the kitkat email that i posted is in fact modded to dodge those policies, yes? that was why i posted it. install them, set up your account - it will still tell you "your account needs some extra settings" blah, but it won't actually enforce them.
if you're talking about wanting to use the LG email app, well, i don't believe anyone has made a mod for that. i find the new kitkat email app superior anyways, so if you're willing to try it, that is a solution.

fireworksordie said:
real quick- you do realize that the kitkat email that i posted is in fact modded to dodge those policies, yes? that was why i posted it. install them, set up your account - it will still tell you "your account needs some extra settings" blah, but it won't actually enforce them.
if you're talking about wanting to use the LG email app, well, i don't believe anyone has made a mod for that. i find the new kitkat email app superior anyways, so if you're willing to try it, that is a solution.
Click to expand...
Click to collapse
Thanks! Looks like it's time for me to install a recovery then.

Soundchasr said:
Thanks! Looks like it's time for me to install a recovery then.
Click to expand...
Click to collapse
You technically shouldn't need to in order to set it up, but it's not a bad idea to make a nandroid. And it'll make the dalvik wipe/odex removal easier. That part may not even be necessary, but I had some issues the first time installing it where Exchange Services started force closing repeatedly.

Lock Pattern issues

10 incorrect unlock patterns deletes data? I just viewed this in youtube and now im a bit hesitant. What if the phone was stolen? They can still use it?? How secure is that??
http://youtu.be/jHwQf4-bJzAy

That why you report it lost or stolen
Sent from my HTC One_M8 using XDA Premium 4 mobile app

The video isn't working but that's just stupid if true. What if your friend is ****ing around just trying to lock it and make you wait like on iPhone and there goes all the data
Sent from my HTC One_M8 using xda app-developers app

This is a horrible feature if true, if your phone is stolen the thief can reset it and have a brand new phone like he got it out of the shop

Well by reporting it stolen it would be known to carriers as a stolen phone and the IMEI would be registered

This has already been discussed in depth including the option to disable it. When the security of the data on the device is more important than the device itself, the feature is a wanted/required one. Most people would rather the phone not self destruct though.
http://forum.xda-developers.com/showthread.php?t=2701911

I just tried this on my phone and it didn't do anything. After 5 attempts I had to wait30 seconds and then after another5 it said you incorrectly entered the pattern 10 times and had to wait another30 seconds
Sent from my HTC One_M8 using xda app-developers app

l7777 said:
This has already been discussed in depth including the option to disable it. When the security of the data on the device is more important than the device itself, the feature is a wanted/required one. Most people would rather the phone not self destruct though.
http://forum.xda-developers.com/showthread.php?t=2701911
Click to expand...
Click to collapse
Thanks for the info

After permanenty locked you enter your email and password,

Is this present in every variant of m8? And no way to disable the automatic wiping of data without root? :-/
Sent from my HTC One using Tapatalk 4

vari9 said:
Is this present in every variant of m8? And no way to disable the automatic wiping of data without root? :-/
Sent from my HTC One using Tapatalk 4
Click to expand...
Click to collapse
Unknown, I can only confirm the Verizon variant. It appears to be an android setting though not an HTC centric one.

Mine doesn't show the "delete waring" and isn't resetting anything. My phone is unbranded and stock rom.

Asmund said:
Mine doesn't show the "delete waring" and isn't resetting anything. My phone is unbranded and stock rom.
Click to expand...
Click to collapse
You only really get it if you're using Exchange as email. I never had this "8 tries left before resetting phone" until I added my work email. If you have your work email and this is happening to you it's probably because your work requires that level of security. If you want to avoid it, just don't add your work email. There are ways to bypass it if you root, however some times (depending on admins) your job's IT dept can tell and you may have issues keeping said job.

Kypt said:
You only really get it if you're using Exchange as email. I never had this "8 tries left before resetting phone" until I added my work email. If you have your work email and this is happening to you it's probably because your work requires that level of security. If you want to avoid it, just don't add your work email. There are ways to bypass it if you root, however some times (depending on admins) your job's IT dept can tell and you may have issues keeping said job.
Click to expand...
Click to collapse
My phone is in fact set up for my work Exchange mail. Maybe some security is disabled in the Exchange server settings...

Asmund said:
My phone is in fact set up for my work Exchange mail. Maybe some security is disabled in the Exchange server settings...
Click to expand...
Click to collapse
Yeah I'd bet you anything that's what it is. My previous job used exchange as well but they did not have security enabled. As soon as I moved into my new job I had to set up a pin. It's a choice your employer's IT dept does whether by regulation or just more security-aware.

Kypt said:
You only really get it if you're using Exchange as email. I never had this "8 tries left before resetting phone" until I added my work email. If you have your work email and this is happening to you it's probably because your work requires that level of security. If you want to avoid it, just don't add your work email. There are ways to bypass it if you root, however some times (depending on admins) your job's IT dept can tell and you may have issues keeping said job.
Click to expand...
Click to collapse
Kypt said:
Yeah I'd bet you anything that's what it is. My previous job used exchange as well but they did not have security enabled. As soon as I moved into my new job I had to set up a pin. It's a choice your employer's IT dept does whether by regulation or just more security-aware.
Click to expand...
Click to collapse
Asmund said:
My phone is in fact set up for my work Exchange mail. Maybe some security is disabled in the Exchange server settings...
Click to expand...
Click to collapse
Exchange security can manipulate the settings but it appears to be enabled by default in Verizon's variant.