Google stored Wifi passwords for Android users

When an Android user make a backup of the system, especially for a device reset, Google provides immediate access to his key WiFi network.

Since Android 2.2 "Froyo" Google allows users of its mobile operating system to backup their personal data in the cloud when you reset or change their terminal. The option to backup data, enabled by default, avoids having to completely reconfigure the tablet or smartphone. Although convenient, this service may unfortunately become disturbing when one learns by Micah Lee, technical manager at the EEF (Electronic Frontier Foundation), Google does not effectively encrypts the data, In particular Wi-Fi passwords, when they pass through the cloud. 


It is clear that Google employees are not going to peel the WiFi codes millions of Android users, nothing says that governments will deny it. With the recent revelations of Edward Snowden scandal Prism, there is no doubt that the NSA can easily access these passwords and local networks of individuals, and businesses.

Encryption is the only solution

As explained Micah Lee, the data backup option can be disabled, and even replaced with a storage solution safer online. For technical responsible for the EEF, the best way to protect your device data encryption, however, remains of them, even before they pass through the cloud. On this last point, it is also joined by Paul Ducklin, Sophos technical manager for the Asia-Pacific region.  We must "encrypt all data before backup, anywhere, and especially in the cloud. "

However, information too well protected can ask as many problems as poorly protected data. In the case of encrypted data, the loss of private key encryption makes them completely inaccessible. "Are you ready to accept the fact a digital equivalent of locking your keys in your car forever (for example, if you forget the password for your encrypted hard drive and you have not backed up the encryption key) ? "Asked Paul Ducklin.