Can you not store plain text passwords in an unencrypted database backup (zip file)?

Question

This is a serious security issue. We are talking about Amazon and eBay accounts here.

At least give us an option to not store the password at all.

Whats the point of time limiting it in the app itself where it is, in theory, protected on unrooted devices but then have it exist forever in a plain textfile? At least password protect the zip file pretty sure your lib supports that already.

Answer 1

I just stumbled upon this too - please remove the plain-text password from the backup!!!

Answer 2

Sorry for not answering earlier.

If I'm not mistaken, all passwords in the backup are file are encrypted just like in the app. While this won't hold of hackers with a major interest and enough time on their hands, it's about as secure as in the app itself. You should always make sure to keep the backups in a safe location.

That said, I'll consider adding an option to emit the passwords from the backup file but the ToDo list is very long. So no promises, sorry!