How to make Flutter secret storage safe in windows?

184 views Asked by At

Context: (this happens in Windows) I'm working on my app that is using the flutter secure storage to write and read some sensitive data, like the generated password to access the sqlite db.

For the sake of testing, I've created a second app that has the same package name and Runner.rc attributes (CompanyName, ProductName, etc), and it only performs a readAll and a print to the console.

Surprisingly it was able to print every key:value generated by my original app.

What I noticed is that the second app is able to read the key generated in the Windows Credential Manager by my original app and therefore has access to the secure files.

Is there a way to protect the Credential Manager the generated Flutter secure storage key in windows? Am I missing an woptions that should be pass to the constructor?

0

There are 0 answers