CITT

    Scan results

    Salt Edge Authenticator

    Android

    Salt Edge Authenticator enables secure banking account access with PSD2 Strong Customer Authentication. Link your bank account to authorize payments with transparent confirmation including payee details, fees, and amounts. Use QR code scanning for instant authentication.

    CITT SCORE
    55
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Users comfortable with Firebase analytics

    Not For: You store sensitive financial data on-device

    What It Means For You

    Usage patterns and crash reports are shared with Firebase and Google Analytics. Stored authentication data may not be as fully protected on the device as expected.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (16)

    Data Security

    3 total
    1 Critical
    2 Medium

    Network Security

    3 total
    3 Medium

    Code Security

    7 total
    3 Critical
    1 Medium
    3 Low

    Privacy

    2 total
    1 High
    1 Medium

    Third-Party Risk

    1 total
    1 High

    Third-Party Services

    Firebase Cloud Messaging, Firebase Analytics, Firebase Crashlytics, Google Analytics, Realm Database, Retrofit, OkHttp, Dagger 2, Coil

    Security Strengths

    • ✓Comprehensive root detection (8+ methods)
    • ✓Hardware-backed RSA-2048 key storage in Android Keystore
    • ✓No JavaScript interfaces in WebView (eliminates RCE risk)
    • ✓Strong cryptographic algorithms (RSA-2048, AES-256, SHA-256)
    • ✓Crashlytics disabled by default
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    authentication
    banking
    psd2
    location
    ads

    Package

    com.saltedge.authenticator

    Version

    3.9.0 (Build 85)

    Analysis Date

    Feb 4, 2026

    Classes Analyzed

    5,538

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 critical, 2 medium)

    Network Security - 3 findings (3 medium)

    Code Safety - 0 findings

    Privacy - 2 findings (1 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    The app collects usage patterns, crash reports, and device information. This data is gathered continuously in the background through multiple analytics and diagnostics services.

    Third-Party Data Sharing

    Data is shared with the following third-party services:

    • Firebase Analytics
    • Firebase Crashlytics
    • Firebase Cloud Messaging
    • Google Analytics

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy75/100
    Data Security25/100
    Network Security70/100
    Code Safety30/100
    Data Collection80/100
    Data Sharing90/100
    User Control85/100

    Positive Security Features

    No notable positive security features were identified in this version of the app.

    Areas for Improvement

    • The protections around stored authentication data should be strengthened so saved account details remain safe even if the device is physically accessed.
    • The app shares usage patterns and crash data with multiple third-party analytics services. Reducing this third-party data sharing would better protect user behavioral data.
    • Certain network communication practices could be tightened to give data stronger protection while it travels between the device and remote servers.

    About This Analysis

    This scorecard was produced through automated static analysis of the app's compiled code and configuration. Scores reflect the state of the app at the version listed below.

    App Details

    • App Name: Salt Edge Authenticator
    • Package ID: com.saltedge.authenticator
    • Version: 3.9.0 (Build 85)
    • Scan Date: 2026-02-04

    Right of Reply

    Developer not yet contacted