@ -23,9 +23,13 @@ download official lineage recovery: https://download.lineageos.org/jfltexx
`adb reboot bootloader`
`heimdall flash --RECOVERY lineage-16.0-xxxxxxxx-recovery-jfltexx.img`
`heimdall flash --RECOVERY lineage-16.0-xxxxxxxx-recovery-jfltexx.img --no-reboot`
Now we don't want to boot into the system, we want into the new recovery
directly - so turn off the phone with the power button, and then boot into
recovery by holding the power button, the home button, and volume up for a few
It boots the system. But we want into the new recovery: `adb reboot recovery`.
Now we need to take the following steps to format the data partition for
@ -69,6 +73,11 @@ long actually.
*(You don't need TWRP, unless you want backup/restore functionality or so.)*
First you need to enable USB debugging again. You can enable the developer
options at "About Phone", tap the "build number" seven times. After you enabled
it, you can find the Developer options in the settings at "System > Advanced >
Developer Options". Enable USB debugging and reboot into the bootloader mode:
wait until bootloader mode is active: it says "Downloading... Do not turn off
@ -103,6 +112,8 @@ Open the F-Droid app, wait until it is done with "Updating repositories".
Install the app "Wrong PIN Shutdown".
Now go to the developer settings, and enable root for Apps and ADB.
Open "Wrong PIN Shutdown", grant Admin rights until forever, activate the
function, and set it to shut down the phone after 5 wrong tries to enter the
PIN. You can try it out directly - if you enter your PIN wrong 5 times, does it
@ -119,7 +130,7 @@ commands with adb - you need to be connected to a PC with a proper USB cable:
adb pull /data/system_de/0/spblob/
adb pull /data/misc/keystore/user_0/1000_USRPKEY_synthetic_password_1bfba4c883309f16
adb pull /data/misc/keystore/user_0/1000_USRPKEY_synthetic_password_* # the file has a different name; just remove the * and press tab before executing it
adb pull /data/system/locksettings.db
@ -131,7 +142,7 @@ lockscreen PIN, but not your encryption passphrase:
adb push locksettings.db /data/system/locksettings.db
adb push 1000_USRPKEY_synthetic_password_1bfba4c883309f16 /data/misc/keystore/user_0/1000_USRPKEY_synthetic_password_1bfba4c883309f16
adb push 1000_USRPKEY_synthetic_password_1bfba4c883309f16 /data/misc/keystore/user_0/ # the filename will be different with your device
adb push spblob/ /data/system_de/0/