Security ChipĪlthough sandbox provides good protection for app data, internal data is still obtainable by system backup, cloud synchronization, and app clones. If a malicious app, for example, an evil input method app(IME), can grab the master password of Keepass2Android, all passwords stored in Keepass2Android can be cracked, though they are encrypted. For example, Keepass2Android stores the encrypted database to external storage, and thus any app with external storage permission can read the database. Lots of Android apps, unexpectedly, even some of password managers, save data to external storage instead of their internal sandboxed storage. Therefore, even a bad app running on iOS/Android cannot steal other apps' private data, unless it can break the sandbox. It means one app cannot access the data inside other apps, and the data stored inside that app are inaccessible from other apps as well. Unlike traditional desktop platforms like Windows, all apps installed on iOS or Android are sandboxed. However, there is no significant improvement in how to protect the stored passwords, though the smartphone era brings new security technologies such as sandbox. Since a decade ago, lots of new password managers have been emerging, especially on smartphones. These passwords are safe on your phone even if your master password is disclosed.

The fourth generation password managers take advantage of security chip on smartphones to protect the stored passwords. The Evolution of Password Manager (4/4) TL DR

Keepass2android ios