Android Database Security Issues
Android databases are typically used to cache application data so that it can be retrieved more quickly than doing a web service call to a back-end database server across the Internet. Every app will have its own databases folder. So if the app’s package name is com.riis.sqlite3, then you can find all its databases in the /data/data/com.riis.sqlite3/databases folder. You can see this in Figure 5-1 where we’re doing an adb shell command to get us a list of the files in the database folder.
Figure 5-1 SQLite databases on your phone
Android databases are not a good place to store sensitive information. As we’ll ...
Get Bulletproof Android™: Practical Advice for Building Secure Apps now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
