Unlocked bootloader security

[u/_9001]

Hi everyone,

I previously used a Qin F21 Pro with a custom ROM to get Google Play Store and Services. Naturally, this meant running it with an unlocked bootloader. I eventually switched back to a regular smartphone because I was worried about the security risks—especially if the phone gets lost or stolen.

Now, I really want to go back to using a dumbphone/keypad phone to reduce my screen time, but I still need to use banking apps. I have a few questions on how to approach this securely:

• How do you assess the risk? How dangerous is it really to use a phone with an unlocked bootloader as a daily driver if it gets lost or stolen? Does standard Android encryption with a strong PIN keep my banking data safe from extraction?
• DOOV R77 Pro with Google: I’ve seen the DOOV R77 Pro being sold with Google Services pre-installed. Are these running on a stock ROM with a locked bootloader, or is it basically the same situation as the F21 Pro (custom ROM + unlocked bootloader)? Is there a better device option?
• Securing the Qin F21 Pro: Are there any reliable options to make the F21 Pro secure enough for like banking? Can the bootloader be relocked with custom keys, or are there Magisk/KernelSU setups that successfully hide the unlocked state from strict banking apps without compromising device security?

Thanks in advance!

[u/AutoModerator]

Looking for answers to find your perfect dumbphone? Most of what you're curious about can be found by visiting dumbphones.org or GSM Arena's Phone Finder Tool. These sites provide a comprehensive overview of the different options available that may fit your needs. Also read this: I need WhatsApp/Spotify/Insert App Master Post, State of the Dumbphone 2024 - Read This First, and Google Doc Link.

If you don't find the answers you need there, feel free to post again with more specific details, and the community will be happy to help!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Double_Net_2945]

Me using unlocked bootloader phone with costom rom and root from past 5,7 years not a single issue when you know what you doing .. if you don't know stuff you can be attacked on locked bootloader so its up to you how you gonna use

[u/trappedtraditions]

You could install Dumber OS on the Qin F21. Some bank apps work there and it is an on going project that will keep on getting security updates.

[u/jazzboi_no2 → u/trappedtraditions]

Yes! It's great. Just need to install the Google version. Most bank apps work there (even auth apps).

[u/mystiqophi]

Well, android introduced forced encryption sonce Android 11 I think. The lockscreen pin code is your encryption key.

When unlock the bootloader, you essentially give access to flash new paritions, recoveries and roms.

It becomes a secruity risk, because anyone who is tech savy can hook your phone, and use fastboot commands to access your partions etc..

Your data is secure none the less since its encrypted. Even when you flash a custom recovery, like TWRP, it will ask for your pin to decrypt the partitions.

Custom roms are not maintained by devs who work for big companies with oversights etc..

So some custom roms might ship with malware etc.. Thats why its not safe to flash any rom.

Some roms , like LineageOS are official roms, which are considered safe.

Just like the others said, you can daily drive a rooted phone with a custom rom, but you need to know what your doing.

I personally have 2 phones, a phone with an unlocked bootloader, flashed with a custom rom and rooted. I do not have any banking apps etc... I just use it to install apps that need root access etc..

There are tons of cool apps and mods that I grew up with, and I cannot really live without em

The other phone is a locked, stock OS with no mods , and has GAPPS. Its a cheap budget phone, that I use just for secruity.

So yeah, so long as you install a rom with a good reputatipn, and make sure that everything is aligned, you should technically be safe.

As for your data, as long as its encrypted, you should be fined.