A Major Security Flaw Has Been Discovered in Samsung's Secure Folder Feature

A security vulnerability has been found in Samsung’s Secure Folder feature, which is made to protect sensitive files and applications on Galaxy devices. The issue was initially reported by a Reddit user who had transitioned from a Google Pixel device.
The issue lets applications within a work profile access files stored in the Secure Folder without restrictions. The encryption feature only stops work applications temporarily instead of fully encrypting the files. By default, the Secure Folder is set to “locked,” which apparently does not provide the same protection as full encryption. Users must manually encrypt the folder for enhanced security.
Employees with a work profile from their employer might accidentally expose sensitive files stored in the Secure Folder. Additionally, apps in the Secure Folder can still be seen in the Android permission manager. Media files like photos and videos in the Secure Folder may be accessible through both personal and work profiles.
Samsung says it’s aware of this issue but has not yet provided details on a timeline for a fix.
For now, it’s recommended to manually encrypt the Secure Folder contents regularly for added protection. Be careful when storing sensitive information in the Secure Folder, especially if you’re using a work profile.
You can also consider alternative secure storage methods for sensitive data, which may be prudent until the issue is resolved.
© 2001-2025 Ziff Davis, LLC., a Ziff Davis company. All Rights Reserved.
ExtremeTech is a federally registered trademark of Ziff Davis, LLC and may not be used by third parties without explicit permission. The display of third-party trademarks and trade names on this site does not necessarily indicate any affiliation or the endorsement of ExtremeTech. If you click an affiliate link and buy a product or service, we may be paid a fee by that merchant.

source