1. Download our Official Android App: Forums for Android!

General Wireless network passwords stored as plain text???

Discussion in 'Android Devices' started by JoeSchmoe007, Mar 17, 2011.

  1. JoeSchmoe007

    JoeSchmoe007 Well-Known Member
    Thread Starter
    Rank:
    None
    Points:
    38
    Posts:
    112
    Joined:
    Mar 8, 2011

    Mar 8, 2011
    112
    11
    38
    Was browsing my phone via Root Explorer and found

    /data/misc/wifi/wpa_supplicant.conf

    To my surprise it contains wireless network passwords in clear text.

    Is this file required or is this some kind of temp storage that can be deleted?
     

    Advertisement

  2. PSkeptic

    PSkeptic Android Expert
    Rank:
    None
    Points:
    78
    Posts:
    905
    Joined:
    Jan 10, 2011

    Jan 10, 2011
    905
    97
    78
    IT Project Manager
    Buffalo, NY USA
    That file is required. Yes, it's stored in plain text (As it is in every OS out there).
     
  3. salguod

    salguod Member
    Rank:
    None
    Points:
    35
    Posts:
    37
    Joined:
    Mar 4, 2011

    I don't have that file on my phone, in fact I show the data folder as empty. I use wifi at home & work. My phone isn't rooted, so am I just not able to see the contents of that folder as a result? I'm using Astro file browser.
     
  4. sdrawkcab25

    sdrawkcab25 Android Expert
    Rank:
     #59
    Points:
    423
    Posts:
    5,589
    Joined:
    Aug 5, 2010

    Aug 5, 2010
    5,589
    2,005
    423
    Male
    PA

    You need to be rooted and use root explorer to see the contents.
     
  5. allambition

    allambition Well-Known Member
    Rank:
    None
    Points:
    56
    Posts:
    138
    Joined:
    Jan 6, 2011

    It is an interesting find, I wasn't aware of that. That should encourage me to change my wi-fi passwords more often I suppose. Hopefully there isn't other information stored in plain text like this lurking around. Thanks for the heads up.
     
  6. sdrawkcab25

    sdrawkcab25 Android Expert
    Rank:
     #59
    Points:
    423
    Posts:
    5,589
    Joined:
    Aug 5, 2010

    Aug 5, 2010
    5,589
    2,005
    423
    Male
    PA
    there are easier ways of cracking wireless encryption than getting access to your device, rooting it, then finding that file and copying it down.
    But yes changing your encryption keys is a good practice, but remember if someone really wants access to your wi-fi network they can get it no matter what you do.
     
  7. euph_22

    euph_22 Android Expert
    Rank:
    None
    Points:
    213
    Posts:
    2,634
    Joined:
    Feb 24, 2010

    Feb 24, 2010
    2,634
    595
    213
    Grad Student (Applied/Computational Math)
    Milwaukee, WI
    Agreed...if somebody wants to get on my Wifi badly enough to get my phone, install root explorer, trackdown this file, find my network, uninstall root explorer, return my phone...I say let them use your bandwidth. It's ridiculous to think of this as a security risk for your network, considering the only way you can exploit this is to have access to the phone for an extended period of time. If I was an evildoer and had access to your phone for that long, there are dozens of vulerablities I'd target before this (email, calendar, bank apps, maps, etc). Not to mention just taking the phone itself and selling it.
     
  8. ilovbaramaca

    ilovbaramaca Lurker
    Rank:
    None
    Points:
    5
    Posts:
    1
    Joined:
    May 29, 2011

    May 29, 2011
    1
    0
    5
    I'm having a problem with my android tablet. I've had passwords stored for sometime on my internet browser and my email with Google is asking for a verification of my password & I don't know it. I don't want to reset anything that's just to much. So can someone tell me how I can find it!!!!
     
  9. sdrawkcab25

    sdrawkcab25 Android Expert
    Rank:
     #59
    Points:
    423
    Posts:
    5,589
    Joined:
    Aug 5, 2010

    Aug 5, 2010
    5,589
    2,005
    423
    Male
    PA
    Those types of passwords are not stored on the phone in a discernable way. You will have to reset your password.
     

Share This Page

Loading...