Tag Info

Hot answers tagged

28

root in Linux (or any Unix-like system) is just the user with User ID 0. The su program (which actually stands for "Switch User", not "Super User") is just a program to start another program with a different user ID than the starting program (by default to uid 0, which is to user root). Android does not use the traditional /etc/passwd, however it still uses ...


25

Gmail's official app doesn't store password in your device. Your password is 100% safe if you use this app. This is how it works: The password is used by Google's authentication servers for the first time ONLY. After first successful authentication, an Auth Token is downloaded to device which is stored in accounts.db file as plain text. For all subsequent ...


8

Not a dev, but here's my best stab at an explanation as I understand it (assuming I've understood your question). Hopefully I'm not too far off the mark... All the 'rooted' ROMs I have used manage root access user the SuperUser application - i.e. when you start an app that wants to run with SuperUser privileges, the SuperUser application will prompt the ...


7

Install Screen Lock Bypass (free) from web interface of Play Store. It'll not reset/remove your PIN, but unlock your device on each reboot. If you want to permanently reset/remove PIN, you'll have to purchase its pro version. In the last, you can always factory reset your device if these apps are not working for you. Factory reset wipes out all custom ...


7

If you use the Android web browser to access any sites that you've logged into and that don't use an SSL encrypted page while you're browsing them, then you should be very paranoid. Have a read up about the Firesheep add-on to Firefox, it uses the fact that on an open, unencrypted Wifi connection anyone can listen to anyone else who is connected's network ...


6

Try logging into your Google account on your computer and changing the password to something very simple like "123456". Then try it on your phone again. I had a problem once logging into my Nook account on my Droid so I logged into the website and changed my password from the standard complex string of random numbers and characters to a plain string, and ...


6

The problem is that wiping data requires to overwrite it. On todays devices with lots of in-device flash memory and large SD-cards this can take a while - up to several hours. This leaves a lot for the attacker to interrupt this process and try again. Therefore wiping triggered by false login attempts is only reasonable if your data is encrypted. Then you ...


6

You would have to use your emergency backup codes you should have printed out: Backup Code Page. These are one-time use codes that Google recommends you print for emergencies to access your Google account to unlock your phone. Additional Information for methods of gaining account access.


5

Apparently I needed to generate an application-specific password for my Android phone. When logged into google on a web browser, go under "Account Settings". Then Select "Authorizing application & sites". Once there create a new application specific password under "Generate new application-specific password". The password will be displayed once. Enter it ...


5

The standard Android browser does this for me on most (non-banking type) websites. When I start typing my username into the login box it shows a drop down of names used in that login box before. Selecting one of those fills the password box in too. If you go into the browser and press Menu -> More -> Settings and then scroll down the settings window to the ...


5

You won't need an internet connection. Also, when typing the username/email, make sure you have either @gmail.com or @googlemail.com at the end, depending on what it was when you added the account. If you didn't add anything, the default for android <= 2.3 is @googlemail.com


5

The simplest solution would be to remove the lock screen but that leads to a whole new set of problems. I would recommend switching to another type of lock screen such as PIN input or password input. That way the OK button must be pressed in order to submit a password attempt. The most effective solution of course - don't give your smartphone to your kids. ...


5

I do not have your phone model on hand to try, but you can give this link a shot. Generally, just go to Settings > Security > check Make passwords visible. This is true for my phone (HTC Desire, BCM 4.0.4). Hope it works for you.


5

Each user account has its own lockscreen settings, so the easiest way to do this is to simply use a password lockscreen for each user. In fact, you can use entirely different lockscreen security for one user than you do for another (e.g. one could use a pattern, one a PIN, one a slide lock, etc). To set this up, select a user and unlock the device, then go ...


4

Accessing the files in the app's protected storage directory will not be possible without root because you will not have proper permissions to access the directories. If the app saved any data to external storage (SD card, for example) then you can get it, but not knowing the app in question it's hard to say where it would be. Generally speaking it would ...


4

If you used full-disk encryption, then your data will be accessible until the device unmounted the encrypted disk (e.g. by rebooting) and discarded the decryption key. If you store your sensitive data in encrypted container, then your data will be accessible until the application closes the container and discarded the decryption key. If you don't use any ...


3

I don't know if you were able to unlock you phone, but what I would like to suggest is once you are able to unlock your phone then get a great app vipsha2 - Remote Phone Screen Lock from Google play. This app has helped me a lot and its free. We just need to send an sms from other phone and we can lock or unlock our phone. Edit by Izzy: As the following ...


3

It doesn't look like you can do anything natively except disconnect the account you're syncing with every time you're done checking your mail. However, there are a number of app protect apps out there that let you put passwords on particular apps for just such a purpose.


3

Webpages can opt out of autofill; intended to be added security for banks and other sites requiring higher than normal security. There are ways to circumvent this in firefox, chrome and IE but I haven't figured out how to do it for android. Whats the origin of the android browser code base? That might be another place to look.


3

No. A quote from http://support.google.com/android/bin/answer.py?hl=en&answer=1663755: Note that this is the same PIN or password that you use to unlock your phone without encryption, and cannot be set independently. EDIT: I found this on xda, but I think it might be risky and not worth the effort. ...


3

Those protected apps aren't secure at all. These protects are meant for girlfriends only... :) As you've said Android doesn't allow one app to prevent another app from starting up, there's no way to really protect an app. The password screen can be by-passed by disabling one receiver of protector app. Even its also not required for some poorly written ...


3

No! No! NO! DON'T YOU DARE! Your phone doesn't know your password. When you log in it is issued an (oath?) authentication token so it doesn't have to deal with passwords. This is not an omission, they didn't just forget that someone might want to change their password, I'm 100% sure that this was intentional. The moment you start dealing with passwords for ...


3

Search and download Unlocker or Screen Lock Bypass app from internet (which are no longer available in Play Store). Push it to the system from recovery (with update.zip). Start the system.


3

General information As The Andro Nerd pointed out in his answer, most apps store passwords (and other sensitive information) encrypted. Some even don't store them at all (they use a kind of "tokens", as is available with most Google apps -- or they don't store anything like that). Unfortunately, only most apps seem to care this way. Some store everything ...


3

I am able to receive reset links despite having logged in today, yesterday and pretty much every day. However you should be able to access your account on your phone (as it will use your login details to sign in to chrome) then use that to add your phone number to your account. Then pick reset my password with my phone which will send an SMS to your phone.


3

There is no functionality to view saved passwords included in the stock browser. The only method for retrieving passwords saved in the stock browser is to open the webview.db file (it's an sqlite database) in /data/data/com.android.browser and look at the password table (it's stored in the clear, no encryption or anything), but that requires root.


3

Multi-User was added with Android 4.2 -- you're running 4.0, so there's no native way to go multi-user without upgrading your system. If you have your device rooted, you might want to take a look at SwitchMe Multiple Accounts, which works with Android 2.1 and up. With Android 4.1, you could make use of the User Management app. Both would enable you to have ...


2

The problem with a rooted android is the same as anything running a *nix OS with a root password unset/null .... any user can type "su" and gain root level (superuser/full administrative permissions) access to the entire system without providing a password. Put bluntly, you have a totaly unprotected system. As far as I have been able to find, the closest ...


2

Usually the phone should have detected the password change and a notification should appear in the notification bar to ask for a new password. Are your phone connected to the internet? If the phone doesn't detect the password change, try rebooting the phone. If the phone still aren't asking for password, try removing your account and readding again, go to ...


2

Keepass is an option. You can set up the KeePassDroid app to use a password database that you keep synced with Dropbox (a good tutorial is available at AndroidPolice). Not very elegant, but it might be what you're looking for.



Only top voted, non community-wiki answers of a minimum length are eligible