Android Phones Store Email Passwords In Plain Texts! Security Nightmare

By -

Now this is a very serious security risk for Android phone users as it has been found out that Android phones store email passwords in plain text. Yes just simply plain text. Imagine how easy would it be for hackers to access your emails.

It has been out that Android phones store passwords for email and some other services in plain text which as you can expect is a nightmare for many users.

“The password for email accounts is stored into the SQLite DB which in turn stores it on the phone’s file system in plain text. Encrypting or at least transforming the password would be desirable.”

For those people who think this security risk is only for rooted phones well think again as if you ever lose your Android phone someone can easily root it and pull the data off it. This is a big security nightmare for many users.

Android has had many previous security reason one of them being the Android Market malware which caused Google to take drastic steps to step up security for the Android Market.

Lets hope Google fixes this issue very soon.

You can follow us on Twitter or join our Facebook Fanpage to keep yourselfupdated on all the latest News!

CEO & Founder of Maypalo

3 Comments to Android Phones Store Email Passwords In Plain Texts! Security Nightmare

  1. Hey Farhan. According to this paragraph “For those people who think this security risk is only for rooted phones well think again as if you ever lose your Android phone someone can easily root it and pull the data off it. This is a big security nightmare for many users.”

    Why do you think it’s a big security nightmare for many unrooted phone users? Because according to my experience, if you root your phones, all data inside your phones will be deleted. so if someone root your phones, they would lost all data from your phones.

    Thanks.

  2. If you have rooted your phone, malicious scripts could parse the SQLite DB and send them.
    If you loose your phone, then the new owner will simply have to scan the DB and find out your passwords

Leave a Reply

Your email address will not be published. Required fields are marked *