Samsung’s Secure Folder Isn’t As Private As You Might Think
Contents
Samsung introduced “Secure Folder” in 2016 as an alternative to the company’s KNOX security solution. It allows you to create a separate, private space for all your important applications and data. That said, the feature isn’t devoid of any flaws. Recently, a Reddit user discovered a vulnerability in Samsung’s Secure Folder feature, which lets anyone see the apps and other data stored in it from a work profile.
Samsung’s Secure Folder flaw allows apps in work profiles to access private files
As Samsung describes it, Secure Folder allows you to have a second phone inside your device by allowing a second instance of apps to run independently. In theory, this should keep your most sensitive data hidden and private. However, a newly discovered loophole suggests that Samsung’s Secure Folder feature isn’t as private as the firm claims, especially if you use a work profile on your same device.
Many users found that the apps running in a work profile on their Samsung phone or tablet can access files stored inside the Secure Folder without any restrictions. Also, it doesn’t matter whether the user’s employer or applications like Shelter or Island set up the work profile.
It appears that Samsung’s Secure Folder only blocks access to the secured apps and files from your profiles. Anyone in your work organization’s IT department may be able to access your private content.
The Secure Folder doesn’t truly lock away your files
The Reddit user who first shared the issue points out that Secure Folder doesn’t operate within a truly isolated space in One UI. The system doesn’t truly lock away the files in a “sandbox.” Instead, it simply hides them from your personal profile. However, the apps running in your work profile can access the content of Secure Folder as if it were just any other storage folder on your device.
As per Mishaal Rahman of Android Authority, media files like photos and videos are the most exposed through this severe flaw. Android’s File Picker blocks Secure Folder files from personal apps, but images and videos are available to the IT department of the company where you work. Samsung has acknowledged this issue but hasn’t provided any details about a possible fix yet.
