Is saving sensitive data into Bundle an issue?

Issue

I have a piece of sensitive data (encryption key) in Activity private variable. When my Activity is paused or stopped, I would like to save this into Bundle in order to be able to recreate prev activity state from onResume.

Is this safe? Can the saved instance be accessed on e.g. rooted phone and is it saved in an encrypted or plaintext form?

Solution

The bundle will be saved to memory, which is not encrypted. However, no other application knows the address of the bundle's contents, so it is highly unlikely that an outsider could glean this information even if they could access your application's memory.

Answered By - Benstrom