Innomerc One useful thing to do today
Enable the supported device encryption feature and verify it is active.
More everyday safety lessonsChoose your depth. Learn at your own pace.
Understand it
A screen lock limits who can use your device. Encryption scrambles stored information so it is harder to read without the right unlocking keys. These protections work together, but they are not the same thing.
Use a strong device PIN or password and a short automatic lock delay. Check the device’s encryption settings and keep any recovery key somewhere safe outside the device. Exact setup varies by product.
Under the hood
Encryption at rest protects stored data under a key-management design. An unlocked session can still expose decrypted files to authorized processes or malware. Locking the screen does not necessarily clear every encryption key from memory.
Practitioner perspective
Assess device state, key escrow, recovery ownership and attack model. Validate encryption and recovery on managed devices rather than inferring protection from the presence of a login screen. Do not claim protection against all physical-access attacks.
Watch it work
A fictional, simplified model. Select a component to inspect it, or follow the steps in order.
Explore the system
Device left
A device remains signed in.
Read every step without animation
Device unlocked
- Device left. A device remains signed in.
- Files accessible. The current user session can read data.
- Exposure. Someone may view private information.
Encryption is not a substitute for locking an active session.
Lock + storage protection
- Lock. The session requires an unlock.
- Encrypted storage. Stored files require the appropriate keys.
- Recovery planned. The owner keeps protected backup access.
Layered protection helps with loss and recovery.
What could go wrong
A lost device without effective storage protection can expose files through routes other than its normal sign-in screen.
What you can do
- Enable the supported device encryption feature and verify it is active.
- Protect recovery keys separately; use automatic locking and hide sensitive lock-screen previews.
Common mistakes
- A screen lock alone does not prove the disk is encrypted.
- Encryption does not stop someone reading files in an unlocked account.
Check your understanding
Active recall: explain this idea in 30 seconds
A screen lock limits who can use your device. Encryption scrambles stored information so it is harder to read without the right unlocking keys. These protections work together, but they are not the same thing.
Now give an example and name one limitation. Revisit the explanation if you get stuck.
Primary sources
Original explanations informed by these specifications and official resources. Source versions and lesson review are separate from product updates.
Content reviewed 2026-09-10. Read the editorial policy.