AccessibilityDataSensitive

  Technique summary
Technique AccessibilityDataSensitive API
Against Malicious accessibility services
Limitations API Level ≥ 34 (Android ≥14)
Side effects None
Recommendations Recommended for use combined with other techniques for older devices

In Android 14, Google introduced the accessibilityDataSensitive property for Views. Any View with this property is visible only to the services that complete the Permission Declaration Form by Google.

This solution relies on restricting access to the protected app to API Level ≥ 34 (or Android 14+), which will take some time to be mainstream. Another approach will be required to cater to the users of older devices.

Example use:

<TextView android:accessibilityDataSensitive="yes" android:text="Your PIN number is 1234"/>

 

Guardsquare

Table of contents