{"id":12077,"date":"2017-06-26T11:00:50","date_gmt":"2017-06-26T15:00:50","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=12077"},"modified":"2018-05-21T17:52:49","modified_gmt":"2018-05-21T21:52:49","slug":"secret-keys-google-play-still-issue-users","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/","title":{"rendered":"Are Secret Keys in Google Play Still an Issue for Users?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">It\u2019s much easier and faster for app developers to publish an app on Google Play than on competitor\u2019s app stores, which is why the Play store remains a popular place for the latest apps. Because of this, though, some malicious apps can get through. Thousands of users may download a malicious app before Google is able to remove it from the Play store. To ensure that your device stays protected against malicious apps, you should scan your device for malware after downloading a new app. Use Full Virus Scan to check your phone and SD card for any hidden threats:<\/span><\/p>\n<p><center><a href=\"psafe:\/\/launch\/antivirus_full\" rel=\"attachment wp-att-9829\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-9829\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1-300x67.jpg\" alt=\"run-security-scan\" width=\"300\" height=\"67\" srcset=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1-300x67.jpg 300w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1.jpg 353w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/center><span style=\"font-weight: 400;\">A few years ago, one of these security threats included the discovery of secret keys hidden in Android apps. This was a major issue in 2014, and it left many worried about the security of their online accounts and how safe their private information really was. In this instance, it was discovered that many apps stored secret keys (such as password and username data) in their app software, which left users\u2019 data vulnerable. This user data could then be used to steal data from Facebook or Amazon, among other websites. The Airbnb app, for example, left users\u2019 private information exposed, which then revealed connected services such as Google, Yahoo, or LinkedIn.<\/span><\/p>\n<p><b>Read More: <\/b><a href=\"https:\/\/www.psafe.com\/en\/blog\/change-default-apps-android-2\/\"><b>How to Change Your Default Apps on Android<\/b><\/a><\/p>\n<p><span style=\"font-weight: 400;\">Back then, Android app developers didn\u2019t have to submit their app for review before publishing their app on Google Play. Now, app developers must have Google approve their app before it can be published. This helps to cut down on malicious and unsafe apps in the Play store \u2014 yet that doesn\u2019t mean that the Play store is 100% secure. Hidden malware, such as the Judy malware, is being discovered all the time. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">App developers have been strongly advised over the years against storing secret keys in apps because of the security risks involved to themselves and their users. Thus, this issue should no longer be a concern when using major apps downloaded from the Play store. Google has made many efforts over the years to direct developers to remove secret keys from their software. Android also has a <\/span><a href=\"https:\/\/developer.android.com\/training\/articles\/keystore.html\"><span style=\"font-weight: 400;\">Keystore system<\/span><\/a><span style=\"font-weight: 400;\"> for developers to use to make their apps more secure for their users. This helps to prevent unauthorized individuals from accessing key data.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Downloading apps from the Google Play store is not a completely risk-free situation. But are smartphone users still at risk of this particular security flaw?<\/p>\n","protected":false},"author":83,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[5],"tags":[30,747,210,2030],"class_list":["post-12077","post","type-post","status-publish","format-standard","hentry","category-security","tag-android","tag-android-apps","tag-apps","tag-google-play"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Are Secret Keys in Google Play Still an Issue for Users? - PSafe Blog<\/title>\n<meta name=\"description\" content=\"Are Secret Keys in Google Play Still an Issue for Users?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Are Secret Keys in Google Play Still an Issue for Users? - PSafe Blog\" \/>\n<meta property=\"og:description\" content=\"Are Secret Keys in Google Play Still an Issue for Users?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/\" \/>\n<meta property=\"og:site_name\" content=\"PSafe Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-06-26T15:00:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-05-21T21:52:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1-300x67.jpg\" \/>\n<meta name=\"author\" content=\"PSafe Newsroom\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/\"},\"author\":{\"name\":\"PSafe Newsroom\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#\\\/schema\\\/person\\\/1c3c9cd7f8f7ff5b8e8071d39226b99d\"},\"headline\":\"Are Secret Keys in Google Play Still an Issue for Users?\",\"datePublished\":\"2017-06-26T15:00:50+00:00\",\"dateModified\":\"2018-05-21T21:52:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/\"},\"wordCount\":397,\"image\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/run-security-scan-1-300x67.jpg\",\"keywords\":[\"android\",\"android apps\",\"apps\",\"google play\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/\",\"name\":\"Are Secret Keys in Google Play Still an Issue for Users? - PSafe Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/run-security-scan-1-300x67.jpg\",\"datePublished\":\"2017-06-26T15:00:50+00:00\",\"dateModified\":\"2018-05-21T21:52:49+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#\\\/schema\\\/person\\\/1c3c9cd7f8f7ff5b8e8071d39226b99d\"},\"description\":\"Are Secret Keys in Google Play Still an Issue for Users?\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/run-security-scan-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/run-security-scan-1.jpg\",\"width\":353,\"height\":79},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/secret-keys-google-play-still-issue-users\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Are Secret Keys in Google Play Still an Issue for Users?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/\",\"name\":\"PSafe Blog\",\"description\":\"Articles and news about Mobile Security, Android, Apps, Social Media and Technology in general.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#\\\/schema\\\/person\\\/1c3c9cd7f8f7ff5b8e8071d39226b99d\",\"name\":\"PSafe Newsroom\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g\",\"caption\":\"PSafe Newsroom\"},\"description\":\"The dfndr blog is an informative channel that presents exclusive content on security and privacy in the mobile and business world, with tips to keep users protected. Populated by a select group of expert reporters, the channel has a partnership with dfndr lab's security team. Together they bring you, first-notice news about attacks, scams, internet vulnerabilities, malware and everything affecting cybersecurity.\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/author\\\/newsroom-psafe\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Are Secret Keys in Google Play Still an Issue for Users? - PSafe Blog","description":"Are Secret Keys in Google Play Still an Issue for Users?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/","og_locale":"en_US","og_type":"article","og_title":"Are Secret Keys in Google Play Still an Issue for Users? - PSafe Blog","og_description":"Are Secret Keys in Google Play Still an Issue for Users?","og_url":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/","og_site_name":"PSafe Blog","article_published_time":"2017-06-26T15:00:50+00:00","article_modified_time":"2018-05-21T21:52:49+00:00","og_image":[{"url":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1-300x67.jpg","type":"","width":"","height":""}],"author":"PSafe Newsroom","twitter_misc":{"Written by":false,"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/#article","isPartOf":{"@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/"},"author":{"name":"PSafe Newsroom","@id":"https:\/\/www.psafe.com\/en\/blog\/#\/schema\/person\/1c3c9cd7f8f7ff5b8e8071d39226b99d"},"headline":"Are Secret Keys in Google Play Still an Issue for Users?","datePublished":"2017-06-26T15:00:50+00:00","dateModified":"2018-05-21T21:52:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/"},"wordCount":397,"image":{"@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/#primaryimage"},"thumbnailUrl":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1-300x67.jpg","keywords":["android","android apps","apps","google play"],"articleSection":["Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/","url":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/","name":"Are Secret Keys in Google Play Still an Issue for Users? - PSafe Blog","isPartOf":{"@id":"https:\/\/www.psafe.com\/en\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/#primaryimage"},"image":{"@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/#primaryimage"},"thumbnailUrl":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1-300x67.jpg","datePublished":"2017-06-26T15:00:50+00:00","dateModified":"2018-05-21T21:52:49+00:00","author":{"@id":"https:\/\/www.psafe.com\/en\/blog\/#\/schema\/person\/1c3c9cd7f8f7ff5b8e8071d39226b99d"},"description":"Are Secret Keys in Google Play Still an Issue for Users?","breadcrumb":{"@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/#primaryimage","url":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1.jpg","contentUrl":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1.jpg","width":353,"height":79},{"@type":"BreadcrumbList","@id":"https:\/\/www.psafe.com\/en\/blog\/secret-keys-google-play-still-issue-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/www.psafe.com\/en\/blog\/"},{"@type":"ListItem","position":2,"name":"Are Secret Keys in Google Play Still an Issue for Users?"}]},{"@type":"WebSite","@id":"https:\/\/www.psafe.com\/en\/blog\/#website","url":"https:\/\/www.psafe.com\/en\/blog\/","name":"PSafe Blog","description":"Articles and news about Mobile Security, Android, Apps, Social Media and Technology in general.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.psafe.com\/en\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.psafe.com\/en\/blog\/#\/schema\/person\/1c3c9cd7f8f7ff5b8e8071d39226b99d","name":"PSafe Newsroom","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g","caption":"PSafe Newsroom"},"description":"The dfndr blog is an informative channel that presents exclusive content on security and privacy in the mobile and business world, with tips to keep users protected. Populated by a select group of expert reporters, the channel has a partnership with dfndr lab's security team. Together they bring you, first-notice news about attacks, scams, internet vulnerabilities, malware and everything affecting cybersecurity.","url":"https:\/\/www.psafe.com\/en\/blog\/author\/newsroom-psafe\/"}]}},"_links":{"self":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/12077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=12077"}],"version-history":[{"count":1,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/12077\/revisions"}],"predecessor-version":[{"id":18390,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/12077\/revisions\/18390"}],"wp:attachment":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=12077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=12077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=12077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}