FreeOTPPlus
FreeOTPPlus copied to clipboard
Security problem with screenshots
The problem
The application does not allow screenshots on the main activity, the activity listing all the entries for which you have OTP setup. But screenshots can be taken in editing activities, where all the sensitive information of entries is displayed.
Steps to reproduce the problem
- Open FreeOTP+.
- Try to take a screenshot (Android will prevent it).
- Select an entry and edit it: entry -> Edit.
- Try to take a screenshot (Android will not prevent it).
Other related issues
The problem here is, not only the possibility to take screenshots, but the information that is displayed in the activity: secret should not be visible at all! Related to issues #162 #181