search

NO-ob / LoliSnatcher_Droid

A booru client with support for batch downloading
GNU Affero General Public License v3.0
392 stars 24 forks source link

[Feature Request] (Privacy) Password protect the app #141

Open GreenLandisaLie opened 2 years ago

GreenLandisaLie commented 2 years ago

Since someone already mentioned changing the app name as a feature, I thought it was the right time to mention this. Title somewhat self-explanatory. Having the (optional) ability to password protect the app could potentially be useful for obvious reasons. I've personally been building the source with the name and icon changed to camouflage the app among the bloatware that came by default with my Android. And to password protect it I simply integrated passcode_screen and made some minor edits. The password should be requested when starting the app as well as when turning off/on the display. Also it would be great if the app could encrypt all of its config files when the user password protects it. This because currently anyone can take a look at them with any text editor/reader.

NANI-SORE commented 2 years ago

I already developed a lockscreen (see local_auth_handler) with support for system biometric/pin login. But I'll hold it off for a while since it involves some fuckery with important flutter stuff which could lead to problems down the line. Maybe I'll switch to something like your suggestion, but store the password in a more secure place. I don't want to encrypt the config file

s-b-repo commented 1 year ago

The most secure place for an app to store passwords on a phone would be the device's native password manager, which is typically encrypted and protected by the device's lock screen. Many operating systems also offer secure storage mechanisms such as the Keychain on iOS or the Keystore on Android, which can be used by apps to securely store sensitive information such as passwords. Additionally, app developers can implement their own encryption mechanisms to protect passwords within their app's data storage. However, it's important to note that no storage solution can guarantee 100% security, so it's always a good idea to use strong, unique passwords and enable two-factor authentication whenever possible.