Wireless network passwords stored as plain text???

[JoeSchmoe007]

Was browsing my phone via Root Explorer and found

/data/misc/wifi/wpa_supplicant.conf

To my surprise it contains wireless network passwords in clear text.

Is this file required or is this some kind of temp storage that can be deleted?

 

[PSkeptic]

Was browsing my phone via Root Explorer and found

/data/misc/wifi/wpa_supplicant.conf

To my surprise it contains wireless network passwords in clear text.

Is this file required or is this some kind of temp storage that can be deleted?

That file is required. Yes, it's stored in plain text (As it is in every OS out there).

 

[salguod]

I don't have that file on my phone, in fact I show the data folder as empty. I use wifi at home & work. My phone isn't rooted, so am I just not able to see the contents of that folder as a result? I'm using Astro file browser.

 

[sdrawkcab25]

I don't have that file on my phone, in fact I show the data folder as empty. I use wifi at home & work. My phone isn't rooted, so am I just not able to see the contents of that folder as a result? I'm using Astro file browser.

You need to be rooted and use root explorer to see the contents.

 

[allambition]

It is an interesting find, I wasn't aware of that. That should encourage me to change my wi-fi passwords more often I suppose. Hopefully there isn't other information stored in plain text like this lurking around. Thanks for the heads up.

 

[sdrawkcab25]

It is an interesting find, I wasn't aware of that. That should encourage me to change my wi-fi passwords more often I suppose. Hopefully there isn't other information stored in plain text like this lurking around. Thanks for the heads up.

there are easier ways of cracking wireless encryption than getting access to your device, rooting it, then finding that file and copying it down.
But yes changing your encryption keys is a good practice, but remember if someone really wants access to your wi-fi network they can get it no matter what you do.

 

[euph_22]

there are easier ways of cracking wireless encryption than getting access to your device, rooting it, then finding that file and copying it down.
But yes changing your encryption keys is a good practice, but remember if someone really wants access to your wi-fi network they can get it no matter what you do.

Agreed...if somebody wants to get on my Wifi badly enough to get my phone, install root explorer, trackdown this file, find my network, uninstall root explorer, return my phone...I say let them use your bandwidth. It's ridiculous to think of this as a security risk for your network, considering the only way you can exploit this is to have access to the phone for an extended period of time. If I was an evildoer and had access to your phone for that long, there are dozens of vulerablities I'd target before this (email, calendar, bank apps, maps, etc). Not to mention just taking the phone itself and selling it.

 

[ilovbaramaca]

I'm having a problem with my android tablet. I've had passwords stored for sometime on my internet browser and my email with Google is asking for a verification of my password & I don't know it. I don't want to reset anything that's just to much. So can someone tell me how I can find it!!!!

 

[sdrawkcab25]

Those types of passwords are not stored on the phone in a discernable way. You will have to reset your password.