search

Crypho / cordova-plugin-secure-storage

Secure storage plugin for Apache Cordova
MIT License
278 stars 269 forks source link

When does the "Android Security: The Forgetful Keystore" present it self? #145

Closed distante closed 6 years ago

distante commented 6 years ago

I am try to figure out how to control this problem but does not matter what I do (change from no screen-lock, to pin,password, path, etc) this problem does not happens.

I have tried on Devices with Android 5.0.1, 6 and 8, also on Emulator with Android 5 and 7. Is this still a problem?

ggozad commented 6 years ago

Please, this is not reddit.

distante commented 6 years ago

Yes but this plug documentation says :

Android keystore deletion on security setting change Changing the lock screen type on Android erases the keystore (issues 61989 and 210402). This is also described in the Android Security: The Forgetful Keystore blog post.

This means that any values saved using the plugin could be lost if the user changes security settings. The plugin should therefore be used as a secure credential cache and not persistent storage on Android.

And yet I am unable to reproduce this on devices or emulators. Do I have to go to reddit and ask there about this plugin?