This device is currently receiving security updates from either the manufacturer or the community.

Verified Boot ensures that all executed code comes from a trusted source and hasn't been tampered with. It establishes a chain of trust from the bootloader through the kernel to the system.

Hardware-backed keystores store cryptographic keys in dedicated secure hardware (like TEE or Secure Element), making them resistant to extraction even if the device is compromised. This protects against chip-off attacks.

BFU security protects data when the device has been powered on but not yet unlocked with credentials. This is the most secure state, where most data remains encrypted and inaccessible.

AFU security protects data after the device has been unlocked at least once since boot. While less secure than BFU, AFU with hardware keystore still provides strong protection against many attacks.