Like Apple’s devices, Android phones are most secure when they’ve been freshly rebooted. In this “Before First Unlock” (BFU) state, biometrics and location-based unlocking won’t work. The only way to access the device is to use the passcode or PIN. Additionally, all the data stored on the phone is encrypted in the BFU state, making retrieval and snooping much more difficult, even for law enforcement groups that have access to advanced data recovery tools.