# Can Files that are saved on the internal storage of my app, be accessed/extracted by the owner of the phone?

**URL:** <https://techcommunity.softwareag.com/t/can-files-that-are-saved-on-the-internal-storage-of-my-app-be-accessed-extracted-by-the-owner-of-the-phone/268041>\
**Category:** Forum\
**Tags:** security\
**Created:** [January 10, 2023, 5:18am UTC](https://techcommunity.softwareag.com/t/can-files-that-are-saved-on-the-internal-storage-of-my-app-be-accessed-extracted-by-the-owner-of-the-phone/268041 "2023-01-10T05:18:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![arjunreddy061594](https://avatars.discourse-cdn.com/v4/letter/a/898d66/32.png) [@arjunreddy061594](https://techcommunity.softwareag.com/u/arjunreddy061594)\
**Post date:** [January 10, 2023, 5:18am UTC](https://techcommunity.softwareag.com/t/can-files-that-are-saved-on-the-internal-storage-of-my-app-be-accessed-extracted-by-the-owner-of-the-phone/268041/1 "2023-01-10T05:18:20Z")

</div>

I was wondering if files containing sensitive information are safe in the internal storage of my application or if I should encrypt them as well. I’m asking about an average tech-savvy person being able to access the files. An expert in the Cyber-Security field will be able I guess.

---

<div class="post-metadata">

**Author:** ![John\_Carter4](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/john_carter4/32/19818_2.png) [@John\_Carter4](https://techcommunity.softwareag.com/u/John_Carter4)\
**Post date:** [January 10, 2023, 8:29am UTC](https://techcommunity.softwareag.com/t/can-files-that-are-saved-on-the-internal-storage-of-my-app-be-accessed-extracted-by-the-owner-of-the-phone/268041/2 "2023-01-10T08:29:28Z")

</div>

You cannot assume that data is secure unless it is encrypted when stored. You can choose either to enable encryption for certain tables, columns etc at the database level (if the DB provides the functionality), or if you want to remain database agnostic then you can choose to encrypt the data prior to writing it to the database. The latter also allows you to secure data regardless of where it gets stored and allows more fine grained control over what get encrypted. You could even choose to redact data within a single field if required.

webMethods provides services (as of 10.11) to allow you to easily encrypt/decrypt data if you want to do this programatically via the WmPublic package.

pub.security:decrypt  
pub.security:decryptAndVerify  
pub.security:encrypt

regards,  
John.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/techcommunity/original/3X/c/d/cd19967bb605d28a72d77eb83a1cae22f3df2eb8.svg) [@system](https://techcommunity.softwareag.com/u/system)\
**Post date:** [July 9, 2023, 8:29am UTC](https://techcommunity.softwareag.com/t/can-files-that-are-saved-on-the-internal-storage-of-my-app-be-accessed-extracted-by-the-owner-of-the-phone/268041/3 "2023-07-09T08:29:57Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.