In order to rectify this you need a good whitelist based, packet inspecting (stateful) firewall. A few reasons for this Android does not come with a firewall so every app can freely access and be accessed by the network. Soley Relying on android's permission based security model is a mistake and I'll explain why.ġ) Anyone serious about security has no choice but to root their device. However, I refuse to have my passwords sit in plain sight on my phone for one minute longer. The only thin I DON'T like about r2mail2 is it isn't open source like k-9. Also you can use it to send / receive encrypted email with Full S/MIME and PGP Plain and PGP MIME support. It uses a master password, encrypts your stored passwords AND your email messages. So, I uninstalled today and now am trying out r2mail2 app. You can tell that the k-9 project has no interest whatsoever in securing our email passwords. There is no 'master password' option yet for k-9 mail. Copy and paste that into an base64 decoder and you will see your password plain as day. transporturi means the data on the right is a password. Under 'browse data' tab, select 'preferences storage' dropdown list, anything on the left that ends in. Simply copy file to computer, and use sqlite database browser to open the file. I just recently learned (and was horrified) that this K-9 mail app I have been using for the last year stores my email passwords / usernames etc in its preferences_storage database which is located in the /data/data/9 folder.

K9 mail app