Codename One - Storing sensitive data

Question

Saying sensitive data i mean:

• Certificates
• Passwors
• other private secrets

Question 1 . Is there any way for third-party applications to access this information, stored using Storage class?

Question 2 . I suppose using FileSystemStorage is not safe at all. Is it right?

Question 3 . What is the safest way to store sensitive data in Codename One ?

Answer 1

Codename offers an encryption for your sensitive data with the introduction of EncrytedStorage . Although, it requires you to install BouncyCastle cn1lib for it to work. You can find this lib under CodenameOne Extensions when you right-click on your project and go to CodenameOne Settings.

FileSystemStorage is safe but not totally secure and yes, could be accessed by another App if the app knows your App's Storage path which is usually possible on rooted android devices.