Android devices running older versions of the software can be remotely reset by Google if a court demands access to it, according to a document prepared by the New York District Attorney's Office.
In other words, Google could technically reset user-generated passwords on many Android devices if it needed to.
First spotted by The Next Web's Ben Woods, the report concludes that owners of new Android phones don't need to worry about Google being able to reset their password remotely - since phones running at least Android 5.0 feature full disk encryption - but you'll still need to remember to turn on the disk encryption setting.
But most people -about 74% of Android users according to the Android Developer Dashboard - have old versions of Android running on their phones and could be at risk for these remote password changes.
If you own an iPhone and worry about the same thing happening when a court orders Apple to assist it in accessing a device, it turns out most iPhones nowadays feature full disk encryption. The NY District Attorney document found that devices running on iOS 8 or higher employ full disk encryption that cannot be penetrated by Apple, which the company turns on by default. And with the rapid adoption rate of updates among Apple fans, it's safe to say this will be a headaches for any law enforcement that wants to see what's on an iPhone or iPad.
Get THE MID-YEAR SMARTPHONE MARKET REPORT now! A comprehensive look at the global smartphone market from BI Intelligence by platform, vendor, country and more. Insights into the power struggles between the biggest platforms and the underdogs. Get the Report Here »