Phone automatically connects to Wi-Fi in BFO mode

OrangeMamba

Hello, I noticed that after restarting or generally after booting up my phone, it automatically connects to my Wi-Fi network, even before I unlock the phone for the first time. I also always have my Wi-Fi module on in AFU mode.

I don't think this was the case before, and I believe that Wi-Fi passwords are also stored in encrypted form on Android (and therefore linked to the first unlocking, the AFU mode).

Is this a bug, am I mistaken, or is it perhaps a leak or security risk?

Novalissoide

OrangeMamba Settings > Network and internet > Internet > Network preferences > Turn on Wi-Fi automatically

Is that toggled ON?

dawt

OrangeMamba I don't think this was the case before, and I believe that Wi-Fi passwords are also stored in encrypted form on Android (and therefore linked to the first unlocking, the AFU mode).

Is this a bug, am I mistaken, or is it perhaps a leak or security risk?

It's encrypted, just with device encrypted storage rather than credential encrypted (ie. requires you to enter a pin). The device encryption keys are still tied to the secure element on the phone, so you can't just read it off the phone. For wifi passwords this is probably still more secure than how it's stored elsewhere, not least because your router needs to store the password as well, and that probably has zero encryption.

de0u

OrangeMamba I noticed that after restarting or generally after booting up my phone, it automatically connects to my Wi-Fi network, even before I unlock the phone for the first time.

This is by design. If that did not happen then it would not be possible to receive an incoming phone call via Wi-Fi calling after a reboot.

OrangeMamba

Novalissoide
No, I have that turned off.

Novalissoide

OrangeMamba and also the adjacent 'notify for public networks'-option?

You could try Settings > System > Reset options > Reset Bluetooth and Wi-Fi

OrangeMamba

Novalissoide

Novalissoide OrangeMamba and also the adjacent 'notify for public networks'-option?
Yes, that is also disabled.

Novalissoide You could try Settings > System > Reset options > Reset Bluetooth and Wi-Fi
I don't want to reset anything, I'm just wondering whether Android stores Wi-Fi configurations in unencrypted form, which is why the phone can connect to my Wi-Fi in before-first-use mode even though I haven't unlocked/decrypted my user profile yet.

OrangeMamba

Ah okay, thank you very much.