markmcavoy / androidtoken

TOTP and HOTP Token for Andriod Devices
Other
75 stars 29 forks source link

Storage is not encrypted by PIN #36

Open vi opened 4 years ago

vi commented 4 years ago

I expect TOTP applications to encrypt their storage.

sqlite3 /data/data/uk.co.bitethebullet.android.token/databases/androidtoken.db 'select * from token' as root reveals seed values and they do not change when I change the PIN.