1

Is there any secure Keystore for Android other than Android Keystore?

If an attacker used an emulator, saving a key in SharedPreferences or storage is pretty much useless since she'll have direct access to it, this eliminating any use of the key.

How would you tackle such an issue?

  • 1
    Ask the user for a passphrase and encrypt with something based off of it. Or, hope that the user's device does not wind up in the hands of an attacker. – CommonsWare Apr 22 '18 at 21:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.