search

PhilippC / keepass2android

Password manager app for Android
https://play.google.com/store/apps/details?id=keepass2android.keepass2android
GNU General Public License v3.0
4.86k stars 393 forks source link

[QUESTION] What data is encrypted? #2680

Closed Wm-A-Weezl closed 1 month ago

Wm-A-Weezl commented 1 month ago

Version 1.10-pre Of the content I type into KeePass2Android, what is encrypted? Only the passwords, or is everything encrypted? I would prefer everything. I often put PINs or answers to security questions in KP2A's Notes section. I hope they are not stored as plain text.
If Notes are not encrypted, can you suggest a good way to prevent their disclosure?

PhilippC commented 1 month ago

everything is first serialized in XML (in memory) and that stream is then encrypted. So yes, everything is encrypted.