[AeroBlue]

I have a friend who has an authenticator to a Bitcoin wallet on an old phone that they are currently locked out of. They have one try left for the password (automatic hard reset) and it is not a PIN code. I understand that android phones are a lot easier to get into, and this is an older model Samsung so I assume the version it at least 4+ years old. I am wondering if anyone has any info on if this is possible / feasible. I assume it would have to be an exploit? Or is there a way to root the phone / pull the files off without the password? I don't have any specifics but just want to know whether it's feasible / some starting points.

Another thing of note: Originally it could be unlocked with fingerprint but it no longer works for some reason (I don't have specifics on this). I can get more info if needed eventually, just testing the waters at this point.

Edit: I apologize if this is the wrong category, it's kind of in-between.

[DramaKing]

Never seen an Android device with automatic hard reset like this. That's even worse than iPhone. It could be a ransomware technique.

Now if the phone hasn't had an update in three or so years, your friend (if you're being honest) might be in luck. If the bootloader is unlocked, and there is no encryption, you should be able to backup the wallet and/or crack the PIN. If it's not (which ought to be the case), you need a bootloader exploit to bypass the signature verification. Normally unlocking the bootloader does a factory reset. Not sure how long that has been the case.

Always back up wallet files. Can't offer much else.

[AeroBlue]

Never seen an Android device with automatic hard reset like this. That's even worse than iPhone. It could be a ransomware technique.

Now if the phone hasn't had an update in three or so years, your friend (if you're being honest) might be in luck. If the bootloader is unlocked, and there is no encryption, you should be able to backup the wallet and/or crack the PIN. If it's not (which ought to be the case), you need a bootloader exploit to bypass the signature verification. Normally unlocking the bootloader does a factory reset. Not sure how long that has been the case.

Always back up wallet files. Can't offer much else.

Yep, main reason I use Authy because I am so afraid of this happening. I figured as much, the phone is a weird model that has all these weird security features. It's the only version of that specific model that is unable to be unlocked by the phone company. Just wanted to inquire, thanks for your input.

[ttbr0]

just out of curiosity, what is the phone model?