Password stored in plaintext

[AndLen]

You store the users password as a SharedPreference, which is simply stored on disk as a plaintext xml file.

[AndLen]

You'll want to hash it and use private mode in SharedPreference as a minimum.

[jordan-thoms]

Hi - I can't hash it since I need to send the original password to 2degrees. It's stored in a private sharedpreferences file (that's the default).

I'm switching to using a 2Degrees JSON api in the next major release, hopefully with that I'll be able to just store the token they give rather than the password.