Does Google Know Your Wi-Fi Password?

Aug. 22, 2013 - PRLog -- His post:

"The 'Back up my data' option in Android is very convenient. However, it means sending a lot of private information, including passwords, in plaintext to Google. This information is vulnerable to government requests for data."

Dangerously Convenient

If you are looking for this option, you'll find it on the 'Backup & reset' section on the Settings page in Android, a function that backs up all of your settings, app data, Wi-Fi passwords, and bookmarks on Google's servers thanks to cloud hosting. Yes, this feature can be deactivated, but most don't due to it's convenience.

Here's an example. You lose your tablet or phone, or performed a system restore and are looking for an easy way to reset the device to the exact configurations you had initially set. It's leagues easier to perform this backup automatically, isn't it? It negates the need to re-enter passwords and re-install all of your apps.

What if you do turn this feature off? You might think it wouldn't be wise, but in fact, you might be better off. Why? Google collects and stores more data without encrypting it than you might be comfortable with. If you turn the feature off, it erases all instances of your data contained on Google's servers. But are you willing to compromise convenience for security?

An Example: The Tumblr App

With the Tumblr iOS app, it was transmitting personal data like passwords without first encrypting the data to keep it secure. Because of this lack of encryption, anyone could get your Tumblr password.

The Google/Android problem is a bit less extreme. The data is encrypted while being transmitted to Google, and could also be stored in encrypted form. However, the problem is that the data is not just available to you exclusively. Anyone can gain access to the encrypted data.

Google makes it so easy to recover your data, whether you lost your device or need to recover missing data. Google can recover all of the data, including your plaintext Wi-Fi passwords, at a moment's notice, even if you don't remember the password to get into your device. It's made for convenience and speed.

The NSA Problem

What about your privacy on the Internet when it comes to the NSA and other Federal organizations? If Google has this list of your data including Wi-Fi passwords, can't they include these lists in their own database? Probably.

Now, how do you use your wireless device? If you're like most people, you have multiple Wi-Fi passwords stored in there -- your workplace, your home, your sister's house, the library -- and you're turning those over as well.

If this bothers you, which it should, there is something you can do about it.

Encrypt

It may not be the convenient option you were hoping for, as simple as Google's backup plan. However, you will be guaranteed security of passwords and other data if you encrypt the data prior to pushing it to the cloud.

Instead of relying on a cloud hosting service for backup, you could also keep a paper record (I know, old-school) of your passwords. Now, you are able to get into your apps and device, but Google doesn't have a record of this data. Win-win.

It may not be as easy as Android's backup system, but it certainly safer. What's more important to you: convenience, or security? I hope you choose option B!

to know more, please see

http://www.ananova.com