element-hq / riot-android

A glossy Matrix collaboration client for Android
Apache License 2.0
1.4k stars 394 forks source link

Prevent screenshots #3428

Open 35609902357 opened 4 years ago

35609902357 commented 4 years ago

Screenshots of the app can be taken and its content is not hidden in recent apps preview, this poses a huge security risk and protection should be mandatory or at least optional but enabled by default. Please add Android's FLAG_SECURE and enable it by default.

KyleNie commented 4 years ago

Screenshot protection is a good feature but it shouldn't be mandatory. While screenshot protection does prevent the user from taking screenshot of a conversation, a malicious party can always use another device to record, or even write down messages. You should only send important or sensitive information to people you 100% trust, and I believe that the most important communication should always be done face-to-face. Yes it is true that screenshot protection can protect you if there's an app record your screen, but remember that if your device is hacked the attacker can do way more than just taking some screenshots.

However I support your idea that the content should be hidden in recent apps view. On Android neither Signal nor Riot does it but it's really a cool and useful feature.

35609902357 commented 4 years ago

Signal has a setting to enable it