search

rt2zz / redux-persist

persist and rehydrate a redux store
MIT License
12.9k stars 862 forks source link

Replace recommended storage engine for secure storage on react-native #1465

Open heg2 opened 5 months ago

heg2 commented 5 months ago

The previously recommended redux-persist-sensitive-storage only encrypts the data on iOS; on Android it is stored in clear text and readable via the file browser. There exists an alpha-Branch which solves the problem, but this is in alpha years now and not updated anymore. Also, this branch fails on Android 9 and older.

We switched to react-native-encrypted-storage in all our projects; it solves the problems mentioned above and works fine.

This would be a better suggestion than the currently suggested storage library, which has a high risk for security breaches for Android users.

losh11 commented 3 months ago

FYI react-native-encrypted-storage has been deprecated. It hasn't been maintained in over a year, and has been archived by the repo creators.

heg2 commented 3 months ago

I can't find any notes of it being deprecated or archived? While it's true that it has not been updated for a year, it is a working solution (unlike the currently recommended redux-persist-sensitive-storage, which by the way has not been updated for seven years).

However, this repo here seems pretty abandoned too, so... 🤷

losh11 commented 3 months ago

If you open up the encrypted-storage repo on github, you can see there's a banner on the top that says that the repo has been archived.