Android Security SharedPreference (Android Security SharedPreference storage) Welcome Star, my blog: blog.csdn.net/voidmain_12…
preface
The security problem has been a big drawback of Android system for a long time, and many people choose Apple instead of Android. As an Android Developer, we need to be responsible for user privacy and do our best to ensure user data security. When I think of this, MY blood boils. As if I were an angel of justice (I can’t go on…) .
Now, let’s get back to business. SharedPreference is a common way for us to store data locally. We’re used to storing user information, user preferences, and remembering user names and passwords in SharedPreference. SharedPreference has some security hidden danger, however, as we all know, SharedPreference is in the form of “key/value pair” the data stored in the data/data/packageName shared_prefs folder in the XML file. Under normal circumstances, we cannot access the data/data directory, nor can we access the files in XML. However, after the root phone, we can obtain the permission to read and write data/data directory through the command line, and the data saved in our SharedPreference is easy to leak, causing irreparable losses. So today we will start from SharedPreference to make a contribution to the security of APP.
In this way, we basically realize the encryption and decryption storage of SharedPreference, and the data security of APP is further guaranteed. Now let’s talk about how to use it: first, let’s look at the common SharedPreference:
Private void saveInCommonPreference(){SharedPreferences SharedPreferences = getSharedPreferences("common_prefs", Context.MODE_PRIVATE); SharedPreferences.Editor editor = sharedPreferences.edit(); editor.putString("username", mEmailView.getText().toString()); editor.putString("password", mPasswordView.getText().toString()); editor.apply(); }Copy the codeLet’s take a look at the local save
[email protected]
147258369
Copy the codeSecondly, let’s look at the usage of SecuritySharedPreference:
Private void saveInSecurityPreference(){SecuritySharedPreference securitySharedPreference = new SecuritySharedPreference(getApplicationContext(), "security_prefs", Context.MODE_PRIVATE); SecuritySharedPreference.SecurityEditor securityEditor = securitySharedPreference.edit(); securityEditor.putString("username", mEmailView.getText().toString()); securityEditor.putString("password", mPasswordView.getText().toString()); securityEditor.apply(); }Copy the codeLet’s see what the difference is in local saving
Rnfpxffj9rNl29dsoQxlUzpSaR9m5K6myIYtqQOiIRU=
HoHo+CFJrXK3CPMUpcTTow==
Copy the codeThe effect is great! We implement the encryption of Share Preference through two simple classes. Although it is a very simple small function, but provides a shield for data security, some students may say, MY project already use SharedPreference, how to migrate to SecuritySharedPreference? How do you transition from unencrypted data to encrypted data? In fact, I’ve already done this for you. The next time we upgrade our application, we call handleTransition() to encrypt the data the first time we use Share Preference.