Android : AccountManager usage

AccountManager class is used for storing user credentials. This can lead to loss of confidentiality.

Standard AccountManager class provides the ability to centrally store user account data. Account data is stored in unencrypted form in a database. The operating system provides a mechanism to limit access to this databased on the application ID (UID): data can be accessed only by the application that put it into the AccountManager database.

However, on devices with unauthorized privileged access (root), an attacker can easily bypass the protection mechanism.