By default your wallet is not encrypted. If you think of it, what
encryption key should it use? Usually you need to ask or instruct the
user first, then encrypt. But ultimately it's up to you as the app
developer.

If you store the wallet in app-private storage, then at least other apps
can't access it, thanks to the Android sandboxing. This is a huge
security improvement compared to the overly liberal model desktop OSes
use. In future, even more secure ways like storing and signing in secure
elements can be explored.


On 06/20/2017 11:36 AM, Bruno Martins wrote:
> Hey lads, first post, 
> 
> I've developed an android simple wallet using bitcoinj. ( 
> https://github.com/ehanoc/xwallet) 
> 
> Now, I'm using mostly WalletAppKit for all bootstrapping everything. The 
> documentation that  suggests for more serious projects to handle each 
> component on its own and then couple them together. 
> 
> I'm wondering what security risks or potential bugs I'm running into here by 
> just using the app kit? Also what should I look for in terms of security, how 
> is the wallet, keys & seed stored. Encrypted by default? 
> 
> Thanks 
> Bruno 
> 


-- 
You received this message because you are subscribed to the Google Groups 
"bitcoinj" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to