Device encryption converts all data on a device's storage into an unreadable format. Access is only granted with the correct authentication key, which is linked to the user's biometrics or PIN. This ensures that even if an attacker bypasses the lock screen or physically removes the storage chip, the data remains secure and inaccessible. It is a fundamental security layer that protects data at rest, providing robust protection against unauthorized access if the device is lost or stolen.

A. Remote backups: This is a data recovery measure to prevent data loss, not a security measure to prevent unauthorized access on the stolen device.

B. Location tracking: This helps in physically recovering the device but does not prevent an attacker from accessing the data on it.

C. PIN code screen lock: While a valid security measure, it protects the user interface. Encryption protects the underlying data itself, offering a stronger layer of security.

1. National Institute of Standards and Technology (NIST). (2022). Special Publication 800-124 Rev. 2, Guidelines for Managing the Security of Mobile Devices in the Enterprise. Section 4.4.1, "Data Encryption," states, "Full-disk or file-based encryption protects the confidentiality of data at rest on a mobile device."

2. Apple Inc. (2024, May). Apple Platform Security. Page 13, "Data Protection overview," explains how file data is encrypted with keys that are protected until the user unlocks their device.

3. Google. Android Open Source Project Documentation. "Full-Disk Encryption." This document details how Android uses kernel-level encryption to protect all user data on the device.