CollegeConnect icon indicating copy to clipboard operation
CollegeConnect copied to clipboard

Encryption of User data

Open sakshampruthi opened this issue 4 years ago • 8 comments

Encrypt profile details that are uploaded or stored on firebase so that only user can access these details

sakshampruthi avatar Jul 18 '20 15:07 sakshampruthi

Is this issue still unresolved?

TaraStefanyi avatar Sep 26 '20 07:09 TaraStefanyi

@TaraStefanyi Yes, it is still unresolved. How do you plan to resolve it?

sakshampruthi avatar Sep 26 '20 08:09 sakshampruthi

I was thinking about generating and storing a secret key safely on user's device (maybe shared preferences or a single file in app's folder). Then we would use this key to encrypt/decrypt the data.

TaraStefanyi avatar Sep 26 '20 11:09 TaraStefanyi

@TaraStefanyi Sure, go ahead give it a try and if possible try it in the MVVM branch

sakshampruthi avatar Sep 27 '20 06:09 sakshampruthi

@sakshampruthi I just wanted to ask what data should be encrypted...

TaraStefanyi avatar Oct 10 '20 12:10 TaraStefanyi

Hi @TaraStefanyi Sorry for the late reply For starters, we're planning to encrypt the personal details of the user before uploading to Firebase and decrypt it wherever we're accessing it in the app. The user details are being uploaded in step two of the signup page.

sjain30 avatar Oct 18 '20 08:10 sjain30

I was thinking about generating and storing a secret key safely on user's device (maybe shared preferences or a single file in app's folder). Then we would use this key to encrypt/decrypt the data.

what if user uninstall's the app and install's the app again ? would he be able to retrieve his data again ? i don't think so.

zubusoomro avatar Oct 03 '22 21:10 zubusoomro