One UI 8 might finally fix Secure Folder's biggest security flaws
TL;DR Samsung's Secure Folder feature currently exposes apps and media by over-relying on Android's Work profile.
A new leak shows that One UI 8 will likely adopt Android's Private Space API to fix this flaw.
With the upcoming update, apps in Secure Folder will no longer work or send notifications when hidden, fixing another flaw.
Samsung Secure Folder is an in-built solution on Galaxy phones and tablets that lets users hide apps and files from prying eyes. While the feature locks these apps and files in a new profile and protects them with a screen lock, a flaw in Secure Folder allows anyone to see which apps and photos you have. Samsung didn't publicly take cognizance of the flaw, so it was anyone's guess if the company was working on a fix. A new leak suggests Samsung could fix the issues with Secure Folder with One UI 8.
Apps and photos are visible outside of Secure Folder primarily because of the way it works. Samsung creates a Work profile for Secure Folder, which is just a distinct profile from the default personal profile. While the data is containerized, specific components like the Android photo picker and Permission Controller can still see the contents within this Work profile, and end up exposing it in certain situations.
Google has its own version of the Secure Folder, which was introduced with Android 15 as Private Space. This is a different 'Private' user profile, which the Android photo picker and Permission Controller treat differently. When this private profile is locked, it is subsequently hidden from the Android photo picker, the Permission Controller, and other system surfaces.
How could Samsung fix Secure Folder? One potential way is to adopt the Private Space approach. It seems Samsung is doing just that, as DevOfIpos on X says that Secure Folder on One UI 8 uses the Private Space API instead of the work profile.
As per the description that appears when hiding the Secure Folder, apps within the Secure Folder won't work and won't send any notifications while the Secure Folder is hidden. This does add a layer of friction when accessing content stored within the Secure Folder, but it should also fix instances of hidden apps sending you notifications and leaking your stored media.
There's currently no word on when One UI 8 will be released. Given that Android 16's stable release is right around the corner, we hope for more news soon. However, One UI 7's delayed rollout has left a bad taste in our mouths, so we aren't holding our breath for a quick One UI 8 rollout.
Got a tip? Talk to us! Email our staff at
Email our staff at news@androidauthority.com . You can stay anonymous or get credit for the info, it's your choice.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Android Authority
21 minutes ago
- Android Authority
Samsung's latest One UI 8 beta is causing a hilarious moon-related camera glitch
Joe Maring / Android Authority TL;DR Galaxy devices running One UI 8 Beta 4 are experiencing a new bug. The issue turns the moon purple after you pass 30x zoom. These moon photos also appear blurrier compared to photos taken with a device running One UI 7. When it comes to betas, bugs come with the territory. Sometimes those bugs can be of the serious variety, causing crashes or other system problems. But other times, bugs can fall into the funny or weird category. The new bug that One UI 8 Beta 4 testers are running into at the moment falls into that latter group. Don't want to miss the best from Android Authority? Set us as a preferred source in Google Search to support us and make sure you never miss our latest exclusive reports, expert analysis, and much more. A growing number of users who are on the latest beta for Samsung's Android 16 skin are reporting a peculiar issue involving the moon and how their device processes camera shots. Specifically, it appears Galaxy devices on One UI 8 Beta 4 are turning the moon purple after a picture is taken. In addition to the moon appearing purple, the shots are also coming out blurry compared to their One UI 7 counterparts. The issue appears to be affecting users not only in the US, but also in the UK and India. Based on the reports, the bug seems to be triggered when Intelligent Optimization is set to Maximum and after you cross the 30x zoom threshold. Since the reports started showing up in the community forums, the One UI beta team has apologized for the inconvenience. However, it's unclear how long it will take for the team to fix this issue. Until then, a possible workaround would be to set Intelligent Optimization to a setting other than Maximum. Follow
Android Authority
21 minutes ago
- Android Authority
This so-called Android 'antivirus' is just a front for spyware
Mishaal Rahman / Android Authority TL;DR LunaSpy Android spyware hides as an antivirus or banking protection app, spreading via messaging apps like Telegram. It fakes virus scans to trick you into granting permissions, then steals data, tracks you, and can even record audio or video. Avoid downloading APKs from messenger links and be wary of unknown security apps requesting broad permissions. Think you're beefing up your Android phone's security? If the antivirus app you just installed came from a random Telegram or a suspiciously out-of-context message from a friend, you might've just invited a spy into your pocket. Don't want to miss the best from Android Authority? Set us as a preferred source in Google Search to support us and make sure you never miss our latest exclusive reports, expert analysis, and much more. A daily Kaspersky blog post says a new piece of Android spyware called LunaSpy has been making the rounds since at least February 2025, slipping onto phones through messaging apps. Sometimes it's pitched as an antivirus, and other times it's so-called banking protection. Either way, once you install it, it puts on a convincing show. It runs a fake scan, flashing scary 'threats found' warnings, and then asking for a laundry list of permissions under the guise that it can fix them. Those permissions aren't for fixing anything. Behind the curtain, LunaSpy can swipe passwords from browsers and messengers, record audio and video, read your texts, track your location, and even run commands on your device. The latest version even has unused code to steal your photos — possibly a preview of what's coming next. All of that data goes back to attackers through a sprawling web of about 150 servers. This means that you just need to be more vigilant than ever about what you're downloading. Don't grab APKs from messenger links, even if they come from someone you know, as their account could be hacked. And if an antivirus you've never heard of asks for access to everything on your phone, that's a good time to hit uninstall. Follow
Digital Trends
2 hours ago
- Digital Trends
The iPhone 17 Air could be as powerful as the 17 Pro, but with a catch
We're less than a month away from Apple's rumored iPhone 17 launch on September 9, and we're learning more about all four upcoming phones every day. Previous rumors have confirmed that Apple is expected to launch four phones, similar to the last few years, but with a key difference: there won't be a Plus model. Instead, it'll be replaced by the iPhone 17 Air, Apple's forthcoming ultra-thin competitor to the Galaxy S25 Edge. Recommended Videos A new post on Weibo from Fixed Focus Digital (via TheShortcut) suggests that Apple may follow Samsung's lead by using its most powerful processor in the iPhone 17 Air, despite its thickness, with a key catch that's likely designed to aid in thermal management. A partial upgrade to the processor Samsung's ultra-thin candybar phone — and the ultra-thin Galaxy Z Fold 7, which followed last month — both use Qualcomm's Snapdragon 8 Elite for Galaxy chipset, which is the most powerful Android chipset we've tried; however, both also throttle the CPU and GPU performance under resource-intensive loads to prevent overheating. The report from Fixed Focus Digital suggests that the iPhone 17 Air will use the same A19 Pro chipset planned for the iPhone 17 Pro and iPhone 17 Pro Max, but with a difference: one fewer GPU core. Instead of the six-core GPU used by the iPhone 17 Pro and Pro Max, the Air will feature just five cores. In actual practice, this is likely to mean a drop in overall graphics performance, but the iPhone 17 Air should still be able to run the latest games. It's worth noting that this is the first we've heard about Apple using a more powerful chipset in the iPhone 17 Air. Given the phone is expected to be just 5.5mm thick — 0.3mm thinner than the Galaxy S25 Edge — it was widely expected that it would launch with the standard A19 chip planned for the regular iPhone 17. However, Fixed Focus Digital has a track record of accurate Apple leaks near launch, so this could yet come to fruition. Given that the iPhone 17 Air will be incredibly thin, it's quite likely that Apple will have to throttle both CPU and GPU performance at times to ensure the phone doesn't overheat. A redesigned vapor chamber that's both shallower and wider, paired with a graphene-looking thermal pad above the SoC, helps the Galaxy S25 Edge manage its thermals; I can't wait to see what approach Apple takes.
