Google Advises Android Developers to Encrypt App Data On Device

guest · Feb 26, 2020

Google Advises Android Developers to Encrypt App Data On Device
February 26, 2020
https://thehackernews.com/2020/02/android-app-data-encryption.html

Google today published a blog post recommending mobile app developers to encrypt data that their apps generate on the users' devices, especially when they use unprotected external storage that's prone to hijacking.
Moreover, considering that there are not many reference frameworks available for the same, Google also advised using an easy-to-implement security library available as part of its Jetpack software suite.

The open-sourced Jetpack Security (aka JetSec) library lets Android app developers easily read and write encrypted files by following best security practices, including storing cryptographic keys and protecting files that may contain sensitive data, API keys, OAuth tokens.
Click to expand...

However, it has been found that the majority of the apps use external storage to store sensitive and private data on users and don't take adequate measures to protect it from other apps, allowing attackers to steal photos and videos, and tamper files (called "Media File Jacking").
To prevent such attacks, Android 10 ships with a feature called 'Scoped Storage' that sandboxes each app's data in the external storage as well, thereby limiting apps from accessing data saved by other apps on your device.

But JetSec library takes it one step further by offering an easy-to-use solution to encrypt data for an extra level of protection.
Click to expand...

Google: Data Encryption on Android with Jetpack Security

Log in or Sign up

Google Advises Android Developers to Encrypt App Data On Device

guest Guest

Log in or Sign up

Google Advises Android Developers to Encrypt App Data On Device

guest Guest

Useful Searches