Encrypting an SD card on Android: a complete guide with step-by-step guide

SD cards remain one of the most convenient ways to expand the memory of a smartphone, but their main weakness is the vulnerability of data if lost or stolen. If the card falls into the wrong hands, photos, documents and even application passwords can become available to anyone. Encryption solves this problem by turning files into an unreadable character string without the correct key.

In this article you will find all current ways to encrypt an SD card on Android —from built-in tools to third-party applications with advanced settings. We will look at how encryption works at the file system level, which versions of Android support this function, and what to do if after encryption the card is no longer detected. We will pay special attention compatibility problems with other devices and methods of data recovery in case of failures.

Why you should encrypt an SD card: real risks and benefits

Many users neglect encryption, considering it unnecessary. However, statistics show the opposite: according to Kaspersky, in 2023 34% of personal data leaks occurred due to the loss or theft of physical media. An SD card is no exception. Here are specific scenarios when encryption will save your data:

• 📱 Theft or loss of a phone. An attacker will not be able to read files, even by connecting the card to another device.
• 💻 Using the card in public places.
• 🔄 Selling or transferring a smartphone. Even after resetting the settings, some data may remain on the memory card.
• 🛡️ Protection against malware. Some viruses scan external drives looking for confidential information.

But encryption has and the reverse side. Firstly, an encrypted card will only work on the device where it was encrypted (if you do not use special applications). Secondly, in case of a system failure or a forgotten password it is almost impossible to restore data without a backup. Thirdly, some budget smartphones may slow down when working with encrypted drives due to a weak processor.

⚠️ Attention: If you are using an SD card As internal memory (function Adoptable Storage in Android 6.0+), its encryption is automatically enabled when formatting. It is impossible to disable it without losing data.

Preparing for encryption: what you need to do in advance

Before encrypting the card, take several critical steps. Neglecting them can lead to data loss or inoperability of the drive.

Create a backup copy of all data from the SD card|Check the free space (at least 10% of the volume is needed)|Charge the phone to 50% or more|Disable automatic application updates|Make sure the card is not damaged (check for errors)-->

Pay special attention Compatibility. Not all versions of Android support SD card encryption out of the box:

Android version	SD encryption support	Features
Android 5.0–5.1 (Lollipop)	❌ No	Internal memory encryption only
Android 6.0–9.0 (Marshmallow–Pie)	✅ Yes	Requires formatting the card as an internal storage
Android 10–13	✅ Yes	Supports encryption without formatting (on some devices)
Android 14+	✅ Yes	Improved encryption algorithms (AES-256-XTS)

If your device works on Android 5.1 or older, but the SD encryption function is not in the settings, you will have to use third-party applications (we will talk about them below). Also check if your card fake - some "no-name" models may not support encryption due to controller errors. You can check the authenticity using the utility H2testw (for Windows) or SD Insight (Android).

Up to 32 GB|32–64 GB|64–128 GB|128 GB and more-->

Method 1: Encryption through Android settings (without root)

The most reliable and simple method is to use the built-in tools of the system. It is suitable for most devices on Android 6.0 and later. The main condition: the card must be formatted as portable storage (not as internal memory).

Instructions for pure Android (for example, Google Pixel, Motorola, Nokia):

1. Open Settings → Security → Encryption and Credentials.
2. Select Encrypt SD card (name may vary).
3. Set a password or PIN code (it will be used to unlock the card).
4. Confirm the action and wait for the process to complete (may take from 10 minutes to an hour depending on the amount of data).

On smartphones with skins (Samsung One UI, Xiaomi MIUI, Huawei EMUI) path may differ:

• 📱 Samsung: Settings → Biometrics and security → Other security settings → SD card encryption.
• 📱 Xiaomi: Settings → Advanced → Privacy → External storage encryption.
• 📱 Huawei: SD encryption function may missing - use third-party applications.

⚠️ Attention: If the battery runs out or the device reboots during encryption, the card may become unreadable. Do not remove it before the process is completed, the progress indicator should show 100%.

After encryption, the card will be automatically mounted when you unlock the phone. However, if you insert it into another device, the system will require you to enter a password. On some firmware (for example, LineageOS), you may need to manually connect through Settings → Storage → SD card → Connect.

Method 2: Encryption using third-party apps

If your version of Android does not have built-in SD encryption, or you need advanced settings (for example, choosing an encryption algorithm), use specialized applications. We tested 5 popular solutions and selected the best:

Application	Encryption type	Pros	Cons
Cryptomator	Container (creates an encrypted disk)	Open source, cloud support	Requires manual mounting
SEcure	Full card encryption	Simple interface, biometrics support	Paid version for advanced functions
LUKS Manager	LUKS (standard for Linux)	High security, flexible settings	Difficult for beginners

Let's take a closer look at working with Cryptomator —one of the most reliable solutions:

1. Install the application from Google Play or official website.
2. Create a new one storage (this is an encrypted container on card).
3. Set a password and select a save location (specify the folder on the SD card).
4. After creating the storage, mount it in Cryptomator and work with files as with a regular folder.

The advantage Cryptomator is that encrypted data can be opened on other devices (including PCs) using the desktop version of the app. However, there is a caveat: files are encrypted. as requiredand not the entire card. This means that unencrypted files outside the container will remain accessible.

What to do if the application does not see the SD card?

If Cryptomator or another application does not display the SD card:

1. Check that the card is formatted in FAT32 or exFAT (NTFS is not supported on most Android devices).

2. Remount the card via Settings → Storage → SD card → Eject → Connect again.

3. If used Adoptable Storage, format the card as a portable drive (data will be deleted!).

Method 3: Encryption via TWRP (for advanced users)

If you have custom recovery installed TWRP, you can encrypt the SD card using commands ADB or manually via the console. This method is suitable for devices without official encryption support or if you need to use non-standard algorithms (for example, Serpent or Twofish).

Warning: wrong actions in TWRP can lead to data loss or "brick" device. If you are not confident in your skills, use other methods.

Step-by-step guide:

1. Boot into TWRP (usually pressed Power + Volume Up when turning it on).
2. Connect the phone to the PC and open the terminal ADB.
3. Enter the command to check the SD card partition:

   adb shell
   twrp mount /sdcard
   ls /sdcard

4. If the card is detected, start encryption (example for F2FS):

   twrp cryptfs enablecrypto sdcard password your_password

5. Wait until it finishes and reboot.

After this, the card will be encrypted at the file system level. To unlock it when connecting to a PC, you will need to use TWRP or specialized utilities like Dislocker (for Linux).

⚠️ Attention: Some firmware (for example, MIUI or ColorOS) block access to /sdcard v TWRP. In this case, you will have to use alternative methods or roll back to stock recovery.

Frequent problems and their solutions

Even with proper encryption, users encounter errors. Here are the most common ones and how to fix them:

• 🔌 The card is not detected after encryption.
  Cause: Mounting failure. Solution: Reboot the device or connect the card to the PC and check it for errors using chkdsk (Windows) or fsck (Linux).
• 🔐 Forgot the password for the encrypted card.
  Cause: There is no backup copy of the keys. Solution: If built-in Android encryption was used, restore the data impossible. For Cryptomator or LUKS try utilities. like Photorec (will recover only unencrypted fragments).
• ⚡ The phone slows down when working with an encrypted card.
  Cause: Weak processor or unoptimized software Solution: Disable encryption for individual folders. (in Cryptomator) or use a class card A2 (accelerated work with small files).
• 📵 The card is not readable on other devices.
  Cause: Encryption is tied to a specific phone Solution: Use cross-platform solutions. like VeraCrypt (creates containers compatible with Windows/macOS).

If the card stops working after encryption, try the following steps:

1. Connect it to the PC and check with Disk Management (Windows) or GParted (Linux), whether it is defined as a partition.
2. If the partition is visible but not mounted, try the command:

   sudo mount -t auto -o loop /dev/sdX /mnt

   (replace sdX with the actual device name).

3. If all else fails, format the card (the data will be lost!).

How to remove encryption from an SD card

If you decide not to encrypt (for example, due to incompatibility with another device), the only reliable way is full formatting of the card. Built-in Android tools do not provide a "decryption" function, as this is contrary to security principles.

Instructions for removing encryption:

1. Create a backup copy of all important data (after formatting, they will be lost!).
2. Go to Settings → Storage → SD card.
3. Select Format as portable drive (or Clear).
4. Confirm the action and wait for completion.

For cards that are encrypted via Cryptomator or LUKS, it is enough to delete the encrypted container (the folder with the extension .cryptomator or .luks). as

If the card was formatted as internal memory (function Adoptable Storage), its encryption is removed only by completely resetting the phone to factory settings. In this case:

1. Go to Settings → System → Reset settings.
2. Select Delete all data (factory reset).
3. After reboot, format the card as a portable drive.

FAQ: Answers to frequently asked questions

Is it possible to encrypt an SD card without losing data?

No, Android's built-in encryption requires formatting the card. However, apps like Cryptomator allow you to encrypt files as they are saved, without erasing existing data. In this case, an encrypted container is created where you manually transfer important files.

Will encryption work if you remove the card and insert it into another phone?

Depends on the encryption method:

• 🔒 Built-in encryption Android: The card will require a password, but may not be detected on devices from other manufacturers (due to differences in encryption implementation).
• 🔒 Cryptomator/LUKS: The card will be read on any device with the application installed and the correct password.

For example, an encrypted card from Samsung may not open on Xiaomieven if you enter the correct password.

What encryption algorithm does Android use?

Standard method - AES-128 (in older versions) or AES-256-XTS (starting with Android 10) (for example, Samsung in series Galaxy S21+) add hardware acceleration of encryption through the chip Security Processor, which increases the speed.

Is it possible to encrypt only individual folders on an SD card?

Yes, but not through the built-in Android tools: Applications for this are suitable:

• Cryptomator — creates a virtual encrypted disk inside a folder.
• Boxcryptor — encrypts selected files with integration into cloud services.
• ES File Explorer (in the old version)—supports encryption of individual files into ZIP archives with a password.

Please note: selective encryption is less reliable since unencrypted files remain vulnerable.

What to do if after encryption the card becomes “raw”?

This means that the file system is damaged. Try the following steps:

1. Connect the card to the PC and check with TestDisk (free utility for partition recovery).
2. If the card is detected as raw, format it in FAT32 via SD Formatter (official utility from SD Association).
3. If the data is critical, contact a recovery lab (for example ACE Data Recovery), but the chances are low.

In the future, avoid removing the card during encryption and use only original class cards UHS-I/UHS-II.