MASTG-KNOW-0038: SQLCipher Database

With the library SQLCipher, you can password-encrypt SQLite databases.

var secureDB = SQLiteDatabase.openOrCreateDatabase(database, "password123", null)
secureDB.execSQL("CREATE TABLE IF NOT EXISTS Accounts(Username VARCHAR,Password VARCHAR);")
secureDB.execSQL("INSERT INTO Accounts VALUES('admin','AdminPassEnc');")
secureDB.close()

Secure ways to retrieve the database key include:

• Asking the user to decrypt the database with a PIN or password once the app is opened (weak passwords and PINs are vulnerable to brute force attacks)
• Storing the key on the server and allowing it to be accessed from a web service only (so that the app can be used only when the device is online)