android data storage question

Question

Hello I would like to know if it is possible to for some application other my own to change a preference value of my application.Also are the preferences been kept by android when the phone is turned off?

is it safe to store some data(flags) on sharedpreferences in order to notify an activity for something?

when user clears the application data what exactly is erased,shared preferences data?

is it prefered to use an internal private file to store secure data? such ass passwords?

also I would like to be able to show a dialog when I detect a certain behavior, for this I have a monitoring service that has to notify the main activity about that. currently this is done through a callback method but I would like to maintain that state even if the application is killed or the phone reboots.

so I thought of setting a sharedpreference value (flag) and then on the oncreate method check if that flag exists. Also should I also check on the resume method?

Thanks a lot and sorry for the amount of questions but I am a little confused. regards maxsap

Answer 1

Preferences (including SharedPreferences) are stored in files under your application's private data directory. No other application can read or write there, unless the phone has been rooted. This internal storage is flash-based and survives the phone being turned off... not much would work if it didn't. :)

As a general security principle you should never store a password. Secure systems store and compare password hashes, not the passwords themselves.

It's fine to store application state in preference data... personally I'd read it in onCreate() and thereafter write the value back to preferences either at the point it changes or in onPause().