将用户名和密码保存到Android应用程序中的平面文件中会降低安全性吗？

Question

I understand that each app runs within its own sandbox.

1. If that is the case, is it safe to save credentials in a flat file?

2. Apart from saving it in the database or over the network what are other options in saving credentials in an app?

Answer 1

SharedPreferences is also a flat file and isn't really save. Everyone with root access can read SharedPreferences. Location:

/data/data/package_name/shared_prefs

You should never store user credentials. You should store some kind of server access tokens.

Answer 2

您可以将应用程序凭据存储在android应用程序的SharedPreferences中，而不是存储在平面文件中。