Android app leaks note content in Recents/App Switcher preview #4178
Unanswered
harmpert
asked this question in
Suggestions
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
When the Android app is sent to the background while a note is open, the system-level "Recents" app switcher preview shows a screenshot of the last visible screen, including full note content. The app's Passcode Lock only re-engages once the app regains focus — but the preview snapshot is generated at the moment the app is backgrounded, before the lock triggers. This means unencrypted note content is briefly (and sometimes persistently, until overwritten by a new preview) visible in the OS-level app switcher, even with Passcode Lock and Auto Lock enabled.
Could the Android app apply WindowManager.LayoutParams.FLAG_SECURE to note-viewing/editing screens? This is the standard approach used by banking and password manager apps to blank out the app switcher preview and block screenshots/screen recording of sensitive screens. It would close a real gap for anyone relying on the local passcode as protection against casual access (e.g. a shared device, or someone briefly picking up the phone).
All reactions