Secrets should be stored in a java.security.KeyStore

[ThomasHabets]

Original issue 158 created by kroot@google.com on 2012-03-28T23:27:19.000Z:

Instead of storing the secrets in the SQLite database, the SQLite database should store the alias of the SecretKey in a java.security.KeyStore. This will allow migration to more secure methods of storage in the future.

Note that you'll have to use a JCEKS instead of the default JKS.

[ThomasHabets]

Comment #1 originally posted by klyubin@google.com on 2012-10-23T14:16:19.000Z:

We might get back to this once there are more secure KeyStores on Android.

[Manouchehri]

Any update on this? I've got a Lollipop device that has no room to install on the internal storage, and can't encrypt the SD card.

[ThomasHabets]

No update, aside from that I'm moving this to the android repo.

google/google-authenticator-android#48