Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace recommended storage engine for secure storage on react-native #1465

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

heg2
Copy link

@heg2 heg2 commented Feb 2, 2024

The previously recommended redux-persist-sensitive-storage only encrypts the data on iOS; on Android it is stored in clear text and readable via the file browser. There exists an alpha-Branch which solves the problem, but this is in alpha years now and not updated anymore. Also, this branch fails on Android 9 and older.

We switched to react-native-encrypted-storage in all our projects; it solves the problems mentioned above and works fine.

This would be a better suggestion than the currently suggested storage library, which has a high risk for security breaches for Android users.

react-native-encrypted-storage instead of redux-persist-sensitive-storage: the latter does not store data encrypted on android!
@losh11
Copy link

losh11 commented Mar 12, 2024

FYI react-native-encrypted-storage has been deprecated. It hasn't been maintained in over a year, and has been archived by the repo creators.

@heg2
Copy link
Author

heg2 commented Mar 13, 2024

I can't find any notes of it being deprecated or archived?
While it's true that it has not been updated for a year, it is a working solution (unlike the currently recommended redux-persist-sensitive-storage, which by the way has not been updated for seven years).

However, this repo here seems pretty abandoned too, so... 🤷

@losh11
Copy link

losh11 commented Mar 13, 2024

If you open up the encrypted-storage repo on github, you can see there's a banner on the top that says that the repo has been archived.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants