Salt Edge Authenticator Security & Privacy Scorecard

Android

55
Overall trust score
Use With Caution
35
Security
75
Privacy

Usage patterns and crash reports are shared with Firebase and Google Analytics. Stored authentication data may not be as fully protected on the device as expected.

Best for

Users comfortable with Firebase analytics

Avoid if

You store sensitive financial data on-device

Findings

  • 5 critical
  • 2 high
  • 2 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • Unencrypted Realm Database Stores Sensitive Banking Credentials
  • Hardcoded IV in AES-GCM Encryption Enables Key Recovery Attacks
  • WebView JavaScript and File Access Enabled with Dynamic URLs

Top privacy issues

  • Extensive Google/Firebase Tracking Without User Consent
  • Advertising ID Collection Without Legitimate Purpose
  • Missing Screenshot Protection on Authorization Screens

Full analysis

Salt Edge Authenticator

Version: 3.9.0 (Build 85)
Platform: Android
Scan Date: 2026-02-04

What This Means for You

Usage patterns and crash reports are shared with Firebase and Google Analytics. Stored authentication data may not be as fully protected on the device as expected.

Recommendation: Use With Caution

Best For: Users comfortable with Firebase analytics
Avoid If: You store sensitive financial data on-device

Key Findings

Data Security - 3 findings (1 critical, 2 medium)

Network Security - 3 findings (3 medium)

Code Safety - 0 findings

Privacy - 2 findings (1 high, 1 medium)

Privacy Concerns

What Data is Collected

The app collects usage patterns, crash reports, and device information. This data is gathered continuously in the background through multiple analytics and diagnostics services.

Third-Party Data Sharing

Data is shared with the following third-party services:

  • Firebase Analytics
  • Firebase Crashlytics
  • Firebase Cloud Messaging
  • Google Analytics

Understanding the Scores

Category Score
Security 35/100
Privacy 75/100
Data Security 25/100
Network Security 70/100
Code Safety 30/100
Data Collection 80/100
Data Sharing 90/100
User Control 85/100

Positive Security Features

No notable positive security features were identified in this version of the app.

Areas for Improvement

  • The protections around stored authentication data should be strengthened so saved account details remain safe even if the device is physically accessed.
  • The app shares usage patterns and crash data with multiple third-party analytics services. Reducing this third-party data sharing would better protect user behavioral data.
  • Certain network communication practices could be tightened to give data stronger protection while it travels between the device and remote servers.

About This Analysis

This scorecard was produced through automated static analysis of the app's compiled code and configuration. Scores reflect the state of the app at the version listed below.

App Details

  • App Name: Salt Edge Authenticator
  • Package ID: com.saltedge.authenticator
  • Version: 3.9.0 (Build 85)
  • Scan Date: 2026-02-04

Versions & scan history

ScanDateOverall score
#1 (current) 55/100