Norton Password Manager access in Android phone with no connection at all

Norton Password Manager
1

I can access all my passwords in Norton Password Manager on my Android phone, with mobile data and WiFi turned off.
Does this mean that Norton Password Manager is storing my passwords locally on my phone then?

1 Like
2

edited by me

3

Thanks, SoulAsylum, but I still don’t understand how it can reach out with no wifi and no mobile data capability.
Can you explain this?

4

I edited my post so I can have a chance to validate.

SA

5

Ok. I put my Z-Flip 5 into “airplane mode” and tested password manager. It DOES indeed open and shows all my passwords. Because the app does not allow screenshots I cannot post those results here. This is an issue in that it would appear on its face the answer is YES, that data is stored within the PWM app. Norton should explain further. I might note that I CANNOT open any of the websites tied to the logins.

SA

6

Thanks again,
NPM gives me a warning that it can’t detect an internet connection when logging in, but still lets me log in and I can then see my passwords.
I stumbled on this issue by chance at the airport, I really think it should not work the way it does because of security concerns…

7

Yes I too can log into the PWM app and view the contents. I also get the no internet connection notice as well. Passwords are clearly visible when selected.

SA

8

Would you be able to bring this issue up to those in charge of correcting things in the app?

9

Yes indeed that is my next step. Thanks for posting the issue. I’m sure it will help a lot of others going forward, whatever the replies are from Norton. Please follow this thread for responses.

SA

1 Like
10

I appreciate you help and attention to this matter. I will surely follow this thread.

11

You’re most welcome!! There are two links on your initial post where I have escalated the issue. One is where I locally flagged the thread to a moderator and the second you will not be able to access because it is private. They are there to show that things were escalated for the forums users to see.

SA

12

Many thanks!

13

I too get the same passwords on my Android phone with no internet connection when opening Password Manager.

I have to assume that the passwords are stored locally and encrypted on my phone. You still need the password or biometrics to unlock so what really is the difference?

It does not seem like a security vulnerabiltry to me since if someone stole my phone they could easily use wifi anyway and have to use the password or biometrics to open.

2 Likes
14

I understand what you are saying, and hope the level of security under which the password manager stores our password locally is very high. Just imagine the damage if there is a rogue app installed in the phone that could sniff and gain access to these passwords…

1 Like