Note that there are some explanatory texts on larger screens.

plurals
  1. POSecurity Concerns for Keyboard input
    text
    copied!<p>I am aiming to find out different security concerns that can occur on Android devices .One of them is the Keyboard Interception</p> <p>Following are my findings</p> <p>a) If i am not using a third party IME (keyboard), i am sure that no application can intercept the keys that i have entered.</p> <p>b)If i am using a third party IME app, this app can get whatever i have typed and may forward it to some other app/ upload it to the net etc.</p> <p>Both above points are valid for a Non Rooted as well as a Rooted phone.</p> <p>If i am using the standard keyboard (Android or that provided by firmware), it is impossible to intercept key events unless the firmware is modified Links i refereed are <a href="https://stackoverflow.com/questions/3974805/global-keyboard-input-listener-on-android">One</a> and <a href="https://stackoverflow.com/questions/3666432/android-intercepting-events-from-other-apps">Two</a></p> <p>What will happen if i plug in an external keyboard like we do on a Galaxy tab 2. When we type using this keyboard on the EditText on Activity at top, is it guaranteed that no one else can intercept the key presses(Rooted/Non rooted phones and without Firmware change)? I hope that the IME security rules given in Android Documentation <a href="https://developer.android.com/reference/android/view/inputmethod/InputMethodManager.html" rel="nofollow noreferrer">here</a> under Security Section apply for external keyboards too.</p> <p>I recently found the <a href="https://play.google.com/store/apps/details?id=com.domobile.sharekeyboard" rel="nofollow noreferrer">DoMobile ShareKeyboard</a> app on Market, it enables input through Computer keyboard using Wifi/GPRS on an Android device. Here obviously user is using a 3rd party IME so its completely insecure in cases where security is a major concern.</p> <p>Please correct me if i am wrong in the points i mentioned.</p>
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload