All rules →
Rules / Kotlin
SHIELD-KOTLIN-017

Password stored in plaintext SharedPreferences

highKotlinCWE-312CVSS 7.5

What it detects

Writing a password or secret into standard SharedPreferences stores it unencrypted on the device.

How to fix

Use EncryptedSharedPreferences (Jetpack Security) or the Android Keystore for sensitive values.

Scan your repo freeFull documentation
Back to all rules
SHIELD-KOTLIN-017: Password stored in plaintext SharedPreferences — Zennoxa Shield