We’re rewarding the question askers & reputations are being recalculated! Read more.
36

Gmail's official app doesn't store password in your device. Your password is 100% safe if you use this app. This is how it works: The password is used by Google's authentication servers for the first time ONLY. After first successful authentication, an Auth Token is downloaded to device which is stored in accounts.db file as plain text. For all subsequent ...


13

In Windows, if you open Manage password in Chrome, then it asks for a master password (i.e. Windows Admin password) to view and manage your passwords. But that's not the case in Android. So for security purposes, Chrome for Android doesn't reveal the password. From Greenbot: Saving your passwords to your device presents some obvious security issues. ...


12

Android passwords used with the built-in Email application are stored in plain text inside a SQLite Database. This is in contrast to the Gmail application, which uses Auth Tokens as described in Sachin Sekhar's answer. For Jelly Bean, the database location is: /data/system/users/0/accounts.db The above location varies with the Android version This ...


8

At least for me, it was actually the device password - used to unlock the phone. So basically it asks for the device password when you try to add a new Google account for some reason. I formatted my phone thinking something else was the issue - but if you enter the device password, it then asks for the account name as normal.


7

The problem is that wiping data requires to overwrite it. On todays devices with lots of in-device flash memory and large SD-cards this can take a while - up to several hours. This leaves a lot for the attacker to interrupt this process and try again. Therefore wiping triggered by false login attempts is only reasonable if your data is encrypted. Then you ...


7

Note: This method requires root access. The credentials of the websites that you allowed Chrome to save are stored in the file Login data which is located inside the data directory of Chrome i.e. /data/data/com.android.chrome/app_chrome/Default/. Certainly, no app or even ADB can access that location and neither Chrome has any provision through GUI to ...


7

From Android Security Internals: An In-Depth Guide to Android's Security : Android doesn’t have a dedicated setting to manage the encryption pass- word after the device is encrypted, and changing the screen lock password or PIN will also silently change the device encryption password. This is most probably a usability-driven decision: most users ...


6

You would have to use your emergency backup codes you should have printed out: Backup Code Page. These are one-time use codes that Google recommends you print for emergencies to access your Google account to unlock your phone. Additional Information for methods of gaining account access.


6

If you know for sure your phone can be powered on, then there might just be another doable (albeit technical) way. I've extracted photos and contacts from another S4 of my classmate a while ago using this. I'll describe it and let you decide whether you can handle it. While in the blind, get to Download Mode by using the key combo. Load a custom recovery ...


6

It is not possible for an user to disable autocomplete for a single site. You can check this link to disable the feature on Chrome (all sites) - it is a simple tutorial on how to do it. However, for a single site, unless you are the website's developer and don't want your users to have this feature, you can't. But, if you are, you can check this ...


5

The simplest solution would be to remove the lock screen but that leads to a whole new set of problems. I would recommend switching to another type of lock screen such as PIN input or password input. That way the OK button must be pressed in order to submit a password attempt. The most effective solution of course - don't give your smartphone to your kids. ...


5

You won't need an internet connection. Also, when typing the username/email, make sure you have either @gmail.com or @googlemail.com at the end, depending on what it was when you added the account. If you didn't add anything, the default for android <= 2.3 is @googlemail.com


5

Go to Settings -> Location and security -> Credential storage -> Set password to change it.


5

Apparently I needed to generate an application-specific password for my Android phone. When logged into google on a web browser, go under "Account Settings". Then Select "Authorizing application & sites". Once there create a new application specific password under "Generate new application-specific password". The password will be displayed once. Enter it ...


5

Go to Settings -> Accounts and sync -> username@gmail.com, press the Menu button, and click "Sync now"; it will prompt you to enter the credentials.


5

I do not have your phone model on hand to try, but you can give this link a shot. Generally, just go to Settings > Security > check Make passwords visible. This is true for my phone (HTC Desire, BCM 4.0.4). Hope it works for you.


5

Each user account has its own lockscreen settings, so the easiest way to do this is to simply use a password lockscreen for each user. In fact, you can use entirely different lockscreen security for one user than you do for another (e.g. one could use a pattern, one a PIN, one a slide lock, etc). To set this up, select a user and unlock the device, then go ...


5

When locking a device using Android Device Manager it replaces the previous "Screen lock" with a password. Once you have entered the password you can follow these steps to remove/replace the screen lock: Go to Settings > Security > Screen lock Enter the password you entered via Android Device Manager Choose your new screen lock method (Pattern, Slide, PIN ...


5

Follow the detailed instructions below on how to completely reset your RCA Android 7 Voyager (RCT6773W22) tablet. Step 1. With your tablet off, press and hold the volume up (+) button and power button until you see the RCA splash screen with Nipper and Chipper. Release both buttons to reveal the Android bot on his back with a caution symbol above him. ...


5

There is most likely a problem with the phone's /efs/ss_data file. I think it's basically a key for decryption of your Wi-Fi passwords and other things in secure storage. Root is required for this fix. First we need to confirm it's a problem with secure storage. Install BuildProp Editor from Play Store Set ro.secure.storage=false Reboot, setup Wi-Fi &...


4

Those protected apps aren't secure at all. These protects are meant for girlfriends only... :) As you've said Android doesn't allow one app to prevent another app from starting up, there's no way to really protect an app. The password screen can be by-passed by disabling one receiver of protector app. Even its also not required for some poorly written ...


4

If you used full-disk encryption, then your data will be accessible until the device unmounted the encrypted disk (e.g. by rebooting) and discarded the decryption key. If you store your sensitive data in encrypted container, then your data will be accessible until the application closes the container and discarded the decryption key. If you don't use any ...


4

Accessing the files in the app's protected storage directory will not be possible without root because you will not have proper permissions to access the directories. If the app saved any data to external storage (SD card, for example) then you can get it, but not knowing the app in question it's hard to say where it would be. Generally speaking it would ...


4

Search and download Unlocker or Screen Lock Bypass app from internet (which are no longer available in Play Store). Push it to the system from recovery (with update.zip). Start the system.


4

There is no way to do this, although you could do it using SMS. You would have to install an app like Cerberus which allows you to send an SMS to wipe your device.


4

There is no functionality to view saved passwords included in the stock browser. The only method for retrieving passwords saved in the stock browser is to open the webview.db file (it's an sqlite database) in /data/data/com.android.browser and look at the password table (it's stored in the clear, no encryption or anything), but that requires root.


4

Another way to do this (e.g. if you use a sync password and passwords.google.com is not an option) is by turning debug mode on, inspecting the tab, and printing the value of the field at the console (e.g. document.getElementById('passwordFieldID').value;) Link for remote debugging: https://developer.chrome.com/devtools/docs/remote-debugging


4

In case there is a problem with the on-screen keyboard most devices support to use an USB keyboard connected via USB On-The-Go (OTG) adapter to the phone - if the phone supports USB OTG at all. The simpler an USB keyboard is the more likely it will work - keyboards with integrated USB hub and/or readers for smartcard or sd-card often cause problems and may ...


3

It doesn't look like you can do anything natively except disconnect the account you're syncing with every time you're done checking your mail. However, there are a number of app protect apps out there that let you put passwords on particular apps for just such a purpose.


3

Alternatively, you copy the .apk for a (properly gotten) QR code reader to your device and install it through the file manager, as long as Settings -> Applications -> Unknown sources is checked.


Only top voted, non community-wiki answers of a minimum length are eligible