i just get an answer from IM+ (instant messenger client android app) support and they told me that my auto saved ICQ, Googletalk, YM passwords are encrypted using TLS, so i want to ask if i need to worry?
I mean i cant use full disk encrayption on my old android so when i loose mobile what is the chance of someone be able to decrypt/crack the TLS? Or do i understand it badly? Im an amateur.
Anyone already cracked TLS?
No, don't worry. The latest version of TLS is not cracked and your passwords sent using it will be safe.
But the TLS is not related to Full Disk Encryption (FDE), FDE is only applicable to data at rest (when your phone is off), whereas TLS is used to handle data during communication. So if you have stored your passwords in your phone in some text file or database etc., then TLS won't help you. But if you enter your passwords in IM from your brain, then you are protected by TLS and will be ok :)
TLS(Transport Layer Security) or also known as SSL(Secure Socket Layer) is used to encrypt and securely send data from one machine to the other without the danger of a MiTM attack and it cannot be used to decrypt data locally.
More info on SSL/TLS: How does SSL/TLS work?
They must not have understood what you are asking. TLS doesn't protect local encrypted passwords. TLS protects your password when it is sent to a server. If you don't have to enter a password when accessing your client, then someone else with access to your phone wouldn't need a password to get at your accounts either.
