Secure SharedPreferences
suggest changeVersions
[{“Name”:“1.0”,“GroupName”:null},{“Name”:“1.1”,“GroupName”:null},{“Name”:“1.5”,“GroupName”:null},{“Name”:“1.6”,“GroupName”:null},{“Name”:“2.0”,“GroupName”:null},{“Name”:“2.0.1”,“GroupName”:null},{“Name”:“2.1.x”,“GroupName”:null},{“Name”:“2.2.x”,“GroupName”:null},{“Name”:“2.3”,“GroupName”:null},{“Name”:“2.3.3”,“GroupName”:null},{“Name”:“3.0.x”,“GroupName”:null},{“Name”:“3.1.x”,“GroupName”:null},{“Name”:“3.2.x”,“GroupName”:null},{“Name”:“4.0”,“GroupName”:null},{“Name”:“4.0.3”,“GroupName”:null},{“Name”:“4.1”,“GroupName”:null},{“Name”:“4.2”,“GroupName”:null},{“Name”:“4.3”,“GroupName”:null},{“Name”:“4.4”,“GroupName”:null},{“Name”:“4.4W”,“GroupName”:null},{“Name”:“5.0”,“GroupName”:null},{“Name”:“5.1”,“GroupName”:null},{“Name”:“6.0”,“GroupName”:null},{“Name”:“7.0”,“GroupName”:null},{“Name”:“7.1”,“GroupName”:null}]
Introduction
Shared Preferences are key-value based XML files. It is located under /data/data/package_name/shared_prefs/<filename.xml>.
So a user with root privileges can navigate to this location and can change its values. If you want to protect values in your shared preferences, you can write a simple encryption and decryption mechanism.
You should know tough, that Shared Preferences were never built to be secure, it’s just a simple way to persist data.
Syntax
- public static String encrypt(String input);
- public static String decrypt(String input);
Parameters
Parameter | Definition| —— | —— | input | String value to encrypt or decrypt.|
Remarks
Shared Preferences were never built to be secure, it’s just a simple way to persist data.
It is not a good idea to use shared preferences for storing critical information such as user credentials. To save user credentials (such as passwords) you need to use other methods such as Android’s AccountManager
.