> Investigators are not going to be typing your password into the running original device, they're going to be trying it against an offline clone of the encrypt

> Investigators are not going to be typing your password into the running original device, they're going to be trying it against an offline clone of the encrypted storage Oh no, absolutely not. We're not talking about "investigators" here, just random cops in a random precinct who have zero infrastructure, zero knowledge about anything, and aren't pursuing any serious "investigation". They will absolutely type your password into the running device. They're doing this all the time.