Oddbean new post about login | logout Spring is safe, your keys are stored on disk in encrypted form, apps cannot access them, the source code is open.
Thank you very much, @brugeman, for taking your precious time to reply. What you tell is assuring. How does it encrypt nsec on disk please? Encrypt with what?
With keys generated inside the Android's internal keystore. Android ensures only Spring can access those keys, decryption is performed inside the keystore.