0

I'd like to implement a system that allows recognizing a user even after the app's cache and data have been cleared from the system settings, as X (Twitter) appears to do.

However, I can't figure out how this is possible.

In my case, I don't use any external login (no Google, Facebook, Apple, etc.), but I've noticed that app still recognizes the user even after a complete data clearing, without requesting credentials again.

So I'm wondering:

  • Where could the user's login or identification information be stored?
  • Are there any Android memory areas or services (such as backup, device ID, or external storage) that can keep the session active?
  • How could I implement a similar solution in a React Native app?

I was wondering if it uses Settings.Secure.ANDROID_ID as a unique device signature, and when opening an app, it sends a request to the server, checks its database, and allows access.

Do you think it can do this? Is this a secure method?

4
  • You wrote "after a complete data clearing" - do you means app data clear or device data clear (factory reset)? Commented Oct 13, 2025 at 14:33
  • "Where could the user's login or identification information be stored?" -- wherever Google stores backups, perhaps. "Is this a secure method?" -- no. Commented Oct 13, 2025 at 17:02
  • @Robert: app data clear. Commented Oct 13, 2025 at 22:32
  • If the user only clears app data ANDROID_ID will stay the same. Therefore it might be used for identifying the device. Using it as a token credential isn't the best idea as it is only 64bit thus a bit small for a token. Normally tokens have a size of at least 128bit. Commented Oct 14, 2025 at 7:47

0

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.