Hi,

I just recently learned (and was horrified) that this K-9 mail app I have 
been using for the last year stores my email passwords / usernames etc in 
its preferences_storage database which is located in the 
/data/data/com.fsck.k9 folder. Simply copy file to computer, and use sqlite 
database browser <http://sqlitebrowser.org/> to open the file. Under 
"browse data" tab, select "preferences storage" dropdown list, anything on 
the left that ends in .transporturi means the data on the right is a 
password. Copy and paste that into an base64 decoder 
<https://www.base64decode.org/> and you will see your password plain as 
day....

There is no 'master password' option yet for k-9 mail. As you can see from 
these posts:

https://code.google.com/p/k9mail/issues/detail?id=1243

https://code.google.com/p/k9mail/issues/detail?id=1192

you can tell that the k-9 project has no interest whatsoever in securing 
our email passwords. So, I uninstalled today and now am trying out r2mail2 
app <https://r2mail2.com/>. It uses a master password, encrypts your stored 
passwords AND your email messages. Also you can use it to send / receive 
encrypted email with Full S/MIME and PGP Plain and PGP MIME support. The 
only thin I DON'T like about r2mail2 is it isn't open source like k-9. 
However, I refuse to have my passwords sit in plain sight on my phone for 
one minute longer.


On Thursday, April 21, 2011 at 3:05:10 AM UTC-7, plafe wrote:
>
> Hi, 
>
> I'm concerned about the way K-9 Mail stores passwords of email 
> accounts. Are passwords currently stored as clear text so if someone 
> for example steals my phone he/she is able to retrieve my passwords? 
>
> Is there any way to prevent that? Is it possible to save passwords 
> behind master password?

-- 
-- 
You received this message because you are subscribed to the K-9 Mail Users List.
To post to this group, send email to [email protected]
To unsubscribe, email [email protected]
To report an issue with K-9 Mail, visit 
http://code.google.com/p/k9mail/issues/list
For more options, visit this group at http://groups.google.com/group/k-9-mail

--- 
You received this message because you are subscribed to the Google Groups "K-9 
Mail" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to