Header image
646.774.5777
 

 
Smartphone and Tablet Encryption and Security

 

Mobile devices used for NYSPI purposes are required encrypted with a passcode lock, even if the phone or tablet is personally owned. These are enforced automatically when a phone or tablet is configured to connect to a NYSPI e-mail account.

iPhone and iPad Instructions

iPhones and iPads made within the past few years are compatible with NYSPI encryption requirements. iPhones must be model 3GS or newer, and both must use iOS version 4.0 or greater. To check your version open Settings, then select the General, About and Version.

Perform a backup

See Apple's How to back up your iPhone, iPad and iPod touch instructions for help. We strongly recommend backing up to iTunes on a computer that is already properly encrypted. If any data on the device and/or back up contains confidential or sensitive data, it cannot be stored (even temporarily) with an External Host such as Apple's iCloud.

Set a Passcode Lock and Encryption

  1. Select Settings from the home screen, then General and Passcode Lock.
  2. Make sure the Simple Passcode option is set to Off; if not tap it to move the slider to the Off setting.
  3. Enter your desired passcode lock of at least 10 digits.
  4. In the Passcode Lock screen, scroll to the bottom to verify that the last button reads Data protection is enabled. This means that data on the device is encrypted.
  5. Return to the General screen (Settings - General from the home screen).
  6. Select Auto-Lock.
  7. Set an auto-lock time of 2 minutes or less.

Your device will now require the passcode you selected in step 3 when the device is turned on, restarted, or upon "wake" after 5 minutes or more of inactivity.

Set a Fingerprint to Unlock

iPhone 5s and later models can also use a fingerprint to unlock the phone while it is powered on. The passcode would still be required when the phone is restarted. IMPORTANT: Do not set more than one fingerprint to unlock as this would be similar to sharing your password.

  1. Go to Settings, then Touch ID & Passcode; or Settings, General Passcode & Fingerprint, and Fingerprints.
  2. Select use a fingerprint to unlock iPhone. Additional options to use a fingerprint for store purchases can be selected as well.
  3. Select Add a Fingerprint and follow the onscreen instructions.

Android Instructions

Phones and tablets must be running Android operating system version 3.0 or higher are compatible with NYSPI encryption requirements. Older devices should not be used to access or store sensitive data.

Setting a Passcode and Auto-Lock

IMPORTANT: instructions may vary for some models and Android OS versions. For additional help please refer to your device's manual or the manufacturer's website.

  1. Select the device's Settings; you may need to select the Menu or Home button first.
  2. Select the Security or Location & security link.
  3. Select Change (or Set up) screen lock.
  4. Choose the Pin or Password option to select a passcode.
  5. When prompted, type in your desired password/PIN of at least 10 characters, then the Back button to save and return to the Security settings.
  6. Make sure that Visible passwords is not checked (tap to de-check if needed).
  7. Press the Back button to return to the main Settings screen, and select Display.
  8. Select the Screen timeout link.
  9. Select an auto-lock time of 2 minutes or less.
  10. Tap the Back button to return to your home screen.

The Android device will now require the password you selected in step 4 when turned on, restarted, or after 2 minutes of inactivity.

Setting Encryption

As stated above, instructions for setting encryption may vary based on the model and Android OS version of your device. Make sure that your device is charged and plugged in; depending on the amount of data it may take a while to fully encrypt. It is also strongly recommended that you perform a backup of the device first to avoid possible loss of information; if the backup will contain confidential or sensitive data it must be stored on properly encrypted and password protected computer or media as well. Please refer to its manual or the manufacturer's website if needed.

  1. Select the device's Settings; you may need to select the Menu or Home button first.
  2. Select the Security or Location & security link.
  3. Scroll down to select Data Encryption.
  4. Tap Encrypt Device Data.
  5. Select Proceed when prompted. Encryption will begin and the device will reboot when finished.
  6. Return to Settings - Location & security - Data Encryption, and select Encrypt memory card.
  7. Select Proceed; encryption on any installed memory card will begin and the device will reboot when finished.