Home/ Questions/Q 3637036
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-19T01:06:29+00:00

I have an Android app that I allow users to have a password in

  • 0

I have an Android app that I allow users to have a password in and “lock” the app so their friends can’t look inside without their password. It doesn’t use a web service or anything, and the password is stored in a private file within the app. Problem is, the users like to forget their password, then email me asking me to do something about it. Right now I can’t. So what I want to do is have something that creates, and consumes a random password. The user could email me, and I could give them some random key the app could recognize, and let them in so they can change their password.

It doesn’t have to be anything super secure. Any help is appreciated.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I don’t think its a good idea to implement a “backdoor” in your application. THis will create a very bad taste.

    If i understood correctly, you want to “unlock” the application, not knowing if the user doing this is in some way authorized. I steal a device, send you an email and you take care i can see the data. Sounds bad…

    All (good) safes i know rely on the user to take care of their keys. They want security and they are responsible.

    EDIT

    You can provide a “security question”.

    Anything else i tried to construct for an “autonomous” password reset raises sever security questions (what are the authentication/authorization mechanics)

    EDIT

    How far are you willing to go? Assuring the possession of something (like an SMS or mail account) may reduce the issues and give some impression of security. So you can intercept SMS or mail from a PREDEFINED (application settings) account with lets say the key word “unlock”. If not set, this feature is disabled. SMS interception should no be that hard.

    • 0