search

jamie-mh / AuthenticatorPro

📱 Two-Factor Authentication (2FA) client for Android + Wear OS
https://authenticatorpro.jmh.me
GNU General Public License v3.0
2.98k stars 198 forks source link

Are the Data Encrypted at Rest? #753

Closed michelangelo136 closed 1 year ago

michelangelo136 commented 1 year ago

First of all thanks for supporting wear OS sync, this was a very strong reason to migrate over to Authenticator Pro.

I was previously using Aegis which encrypts the data while at rest, can you validate that Authenticator Pro does the same?

jamie-mh commented 1 year ago

Hi,

Yes. The app uses a SQLCipher database encrypted with the app password set by the user. When you use biometric unlock, the database password is encrypted using a key stored in the Android KeyStore only released by the system once biometrics are validated.

Cheers