Skip to content
This repository has been archived by the owner on Jun 11, 2024. It is now read-only.

Lisk-mobile: Stop using Android ID ( the getUniqueId method ) as username for keychain storage #1940

Closed
Tracked by #1368
ManuGowda opened this issue Jul 20, 2023 · 0 comments · Fixed by #1969
Closed
Tracked by #1368
Assignees
Milestone

Comments

@ManuGowda
Copy link
Contributor

Expected behavior

Using the Android ID may raise concerns about users' privacy and it forces the READ_PHONE_STATE permission to be used, which may be alarming for users. Use an application-wild constant instead, possibly concatenated with a random string.

Reference: https://github.com/LiskHQ/lisk-mobile/blob/52ac8a151ee4f4fe6f3dbd3f50343ca2052731c9/src/modules/Auth/utils/recoveryPhrase.js#L105-L105

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
3 participants