Samsung Password Warning — Act Now, Credentials Exposed In Plain View
Samsung confirms massive password security slip.
Given the sheer amount of news that concerns user credentials, from warnings about 800 million stolen passwords found online, and infostealer malware constantly adding to that number, you would like to think that securing them would be priority number one for smartphone manufacturers. Not, it would appear, as far as Samsung is concerned. Thanks to eagle-eyed One UI users, Samsung has now confirmed that there is, indeed, a massive password problem that poses a security risk. Here's what you need to know and do right away.
Hackers really don't need the job of finding and compromising your passwords made any easier, which is why so many services are working hard to convince users to move to more secure passkey technology. One of the most prominent players in the smartphone industry, Samsung, has been called out for making a rather huge password security faux pas, however. In a One Ui beta support community forum, one user pointed out that passwords are being exposed in plain text for anyone with access to the device clipboard to see, copy, and compromise.
The user, going by the handle OicitrapDraz, said 'I copy passwords from my password manager all the time… and I know a lot of people do the same. How is it that Samsung's clipboard saves everything in plain text with no expiration?' That's a huge security issue, they said, and oh boy, they are not wrong.
The clipboard functionality is so tightly integrated into the One UI system that it makes no difference what keyboard you use, what protective measures you try to take, your history gets stored in plain text all the same. 'If someone steals your phone, or even if a friend or acquaintance uses it while it's unlocked,' OicitrapDraz warned, 'they can just scroll through your clipboard and see all your passwords.'
As first reported by Cybernews, Samsung has confirmed that the password exposure issue is for real and has no permanent solution at this time. I have reached out to Samsung for a statement, but in the meantime, a Samsung spokesperson has responded to the forum posting with a mitigation workaround.
The One Ui Beta Team said:
'As you've noticed, the clipboard history is currently managed by One UI system-level integration, which means even third-party keyboards like Gboard cannot override its behavior. At this time, there's no built-in setting to auto-delete clipboard contents after a certain period, which can indeed pose a security risk in some situations. We agree that adding options such as auto-clear clipboard after X minutes/hours or excluding sensitive apps from clipboard history would be valuable enhancements. We'll share this feedback with the appropriate team.'
As far as a workaround in the meantime is concerned, Samsung said that users are recommended to clear their clipboard history regularly and use a secure input method, such as copying directly from a password manager app, where possible. I'd go further and add switching to a passkey wherever it is supported to that list.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Gizmodo
34 minutes ago
- Gizmodo
The Samsung 990 PRO 2TB SSD With Heatsink Is Now 45% Off, Amazon Rapidly Sells Through Its Stock
If you're considering upgrading your computer or gaming setup seriously, a first-class internal SSD makes a world of difference. Whether you're a gamer or simply someone who wants a faster system, storage speed and reliability matter. The Samsung 990 Pro 2TB SSD with heatsink offers all of that and: acceleration speed, improved thermal control, dependable reliability and it is a compact 2280 M.2 PCI-E 4.0 device. At this moment, this powerful storage option is on sale for a crazy good price on Amazon, so it's a perfect time to improve your gaming rig. This internal 2TB SSD is currently priced at just $179, down from its original $309 price. Even the regular 2TB model without heatsink is on sale for $169 (original price $249) but for the majority of users thinking about using, and/or pushing their systems to their maximum, the model with the integrated heatsink is the cheaper and smarter way to go. See 2TB internal SSD with Heatsink at Amazon See 2TB internal SSD without Heatsink at Amazon Why Should You Buy This Internal SSD? So what makes the Samsung 990 Pro with heatsink so special? First and foremost, it's all about speed: This solid-state drive utilizes PCIe Gen4 technology with sequential read speed of up to 7450 MB/s and write speeds of up to 6900MB/s, which makes it among the fastest drives available today. Whether you're loading extremely large game files, working with high-resolution video or massive data sets, the difference is immediate. The 990 Pro shows more than a 55% improvement in random performance compared to its predecessor (980 Pro). The ultra-slim heatsink alone is a great product differentiator for sustained performance with no throttling: The heatsink dissipates heat efficiently and keeps the drive cooled during prolonged and heavy use. When high-performance speeds and reliability is required along with cooled conditions for gaming and professional workloads, heatsinking is crucial. The ultra-slim profile of the heatsink is also compatible with nearly all possible systems including the PlayStation 5 and any desktop or laptop meeting PCI-SIG D8 specifications which the 990 Pro falls within. With the 990 Pro with heatsink, you will experience near-max PCIe 4.0 performance without the worry of heat or performance loss. The Samsung 990 Pro is also great for capacity perspective as well since it is available from 1TB, to 4TB, accommodating whatever space you need for games, media, and projects. While all models are reasonably priced, 2TB makes the most sense from a price point and space perspective for most gamers and professionals alike. With 2TB, you can load all of your games, complete large video projects, and store important files without constantly rerouting and stressing. If you're building a new computer, upgrading your PlayStation 5, or just want better performance for a fair price, this SSD is really well worth it. See 2TB internal SSD with Heatsink at Amazon
Tom's Guide
36 minutes ago
- Tom's Guide
I've done the math, and the results are in — the Samsung Bespoke Jet AI Ultra is a 5-star vacuum cleaner
I'm not going to lead you on: the Samsung Bespoke Jet AI Ultra is the best vacuum cleaner in the world. Certainly it's the best one I've ever tested or used. I adore everything about this vacuum cleaner, from its super-powerful cleaning capabilities to its sleek design. Samsung makes a range of Jet vacuums, including the Bespoke Jet robot vacuum and the Jet Pet. However, the Bespoke Jet AI Ultra is the best-of-the-best, top-of-the-range vacuum. After announcing it in March 2025, the vacuum was officially released in April 2025. It brings me great joy to announce that Samsung's claim of 'the most powerful vacuum in the world' is, in fact, 100% true. So, if it's so good, why bother reading the rest of the review? Well, I'll get into all the cleaning details and smart home features in this Samsung Bespoke Jet AI Ultra vacuum cleaner review. Price $1,099 / £1,199 Bin volume Vacuum: 16 ounces / Charging station: 70 ounces Max runtime 60 min / 100 min Battery charging time 210 min / 300 min Included batteries 2: 60 min / 100 min No. of tools 5 plus tool stand Filters HEPA Dimensions 11.8 x 33.5 x 11.8 inches Weight 14.1 pounds Bagged or bagless Bagless (vacuum), bagged (charging station) The Samsung Bespoke Jet AI Ultra (say that 10 times) is $1,099 from Amazon U.S. and £1,199 from Samsung U.K.. It doesn't seem to be available on Amazon U.K. yet. This makes it one of the priciest vacuum cleaners I've ever seen, but that's for a valid reason. Sometimes good things are expensive. The Bespoke Jet AI (as I will now refer to the vacuum to save my fingers) self-cleans, it has Wi-Fi and smart home compatibility, and it's really good at cleaning. I see no issue with the price. The Dyson Gen5Detect I use is $949, but has no cleaning station or app control. If you want to save $$$ but still get a decent vacuum, I'd recommend the Shark Clean & Empty, which is just $349. Where the Samsung Bespoke Jet AI vacuum excels is its design. It's super unique, and definitely one of the most intelligently designed vacuums I've ever reviewed. The Bespoke Jet AI is a mix between a cordless stick vacuum and a robot vacuum: it has a stick vacuum and a cleaning station. This cleaning station automatically empties the vacuum dustbin when you place the vacuum on top. But, be warned — it's not magnetic, nor does it click into place. One jiggle and the vacuum might fall right off. The Bespoke Jet AI comes in black or mint. I tested mint, which would have been my choice had I been purchasing this vacuum for myself. The cleaning station is quite big, so make sure you choose the color that will look best in your space. The vacuum itself has five tools and a tool stand. This tool stand looks like an old iron fire tool stand, but is made from a thin plastic. Considering how well-made the vacuum cleaner itself is, I was a little disappointed to feel that the tool stand is flimsy. However, it still held my tools adequately, so this weaker construction didn't negatively affect usability. The tools are: pet tool (great for hair), active dual brush (general), slim LED (hard floors), and then handheld crevice tools and a flex tool for hard-to-reach places. The pet tool is absolutely phenomenal at cleaning up ground-in hair, which I'll discuss in full later. Even though the slim LED is intended for hard floors only, I found it worked really well on my low pile carpet. Finally, the active dual brush is the ideal all rounder: it was able to clean my low pile carpets and hard floors instantly. As the vacuum easily converts into a handheld, I found it super versatile for cleaning my entire house. I could clean the carpeted areas and hard floors without needing to switch brush. I could reach into the crevices beside my fridge and under cupboards easily. On the vacuum handle itself is a bright screen that shows you battery time, current cleaning power, and allows you to control cleaning mode. I found this screen very easy to use and helpful. It'll alert you if there are any blockages, or if it's powered up to a more intense cleaning mode. I'm a little disillusioned with smart home at the moment (what do you mean, I need to download an app to use my hair dryer?), but the Bespoke Jet vacuum is perfect for smart home aficionados. As with other Samsung gear, it links up with the Smart Things app. I already have a Samsung washing machine, so watching my virtual house grow when I added this vacuum was pretty cute, I can't lie. Setting up the vacuum was easy: simply scan the QR code and you're good to go. I named my vacuum cleaner (following the silly nomenclature trend of my washing machine's moniker 'Mayor Spinny') and was good to go. Smart Things is basically an easily-accessible control panel: no fiddling with tiny buttons on the vacuum itself (even though my experience with controls on the screen was fine). Here are a few screenshots of the Smart Things capabilities. As you can see, there's not really too much you can do on the Smart Things app. This could be because I have an iPhone, or it could be because, well, it's a vacuum. Even so, I like being able to remote control emptying the dustbin. Bizarrely, if you have a Samsung cellphone, you can receive calls to the vacuum cleaner. As I have an iPhone, this feature was a little beyond me, but I suppose it's… nice to have if you like receiving calls on your vacuum? Samsung has some bold claims about this vacuum: it's 'the world's most powerful stick vacuum'. And honestly? I believe it. There's a reason you see a 5-star rating above. The Bespoke Jet AI has an RPM of 148,000, compared to the Dyson Gen5Detect's 135,000 and the Dyson V15s's 125,000 RPM. The Bespoke Jet AI has something called a 'HexaJet Motor', which effectively means the vacuum can reach powers of up to 400W during cleaning. In reality? This translates to 100% clean floors almost instantly. On top of using this vacuum as my main vacuum for over a week, I ran through Tom's Guide's standardized tests too. To test the Bespoke Jet AI's ability to clean on carpet, I used hair, cat litter, and Cheerios on my medium-pile rug. For the hair, I used the Pet Tool, and for the other two I used the standard Active Dual Brush. Item Target clean Actual clean Cat litter 20g 100% Cheerios 20g 100% Hair One hair extension 100% As you can see from these results, the Samsung Bespoke Jet AI Ultra utterly demolished these tasks. The Cheerios took just one pass to be completely cleaned up. I was shook. The hair took a few slow passes with the Pet Tool, but I had really ground the hair into the carpet. This table below is the result of our cleaning tests repeated on hard floors rather than a thick pile carpet. Item Target clean Actual clean Cat litter 20g 100% Cheerios 20g 100% Hair One hair extension 100% Again, the Bespoke Jet AI Ultra made light work of these tasks. As with above, I used the Pet Tool for the hair and the Active Dual Brush for the other two. I use DecibelX to monitor volume. On AI mode (standard mode, basically), the Bespoke Jet AI ran at an average of 71dB, and topped out at 84dB in 'Jet' mode. This is 1dB quieter than the Dyson Gen5Detect's max mode, and a faster RPM, so in actuality this means it's a considerable degree quieter than the Dyson. One of my favorite aspects of the Bespoke Jet AI is that it comes with two batteries. One battery has a max runtime of 100 minutes, and the other is 60 minutes. As with other vacuums, these 'max runtimes' are calculated in the lowest power mode. From fully charged, this is what the screen displayed as battery runtime. Power 60 minute battery Min 42 AI 24 Mid 24 Max 13 Jet 14 I've not tested any vacuums that come with two batteries before. The Dyson V15s tops out at 60 minutes, the Dyson Gen5Detect 70 minutes, which puts the Bespoke Jet AI Ultra in pole position here. As the Bespoke Jet AI is a self-emptying vacuum, there's very little day-to-day maintenance required. Obviously you need to empty the cleaning station dustbin, but this holds 70 ounces so that will be a rare occurrence. Samsung provides 3 cleaning station bags in the Bespoke Jet AI box. Once these run out, Samsung sells 5 bags for $39. It will depend on the size of your house, but I didn't get anywhere close needing to empty the cleaning station bag during my 10-day testing. As I only had this vacuum on a loan (whereas usually I get to keep vacuums for long-term testing, so I can say for certain that they hold up over time), I had to clean the vacuum and tools thoroughly before returning to Samsung. I can report that while removing the hair extensions from the pet tool was laborious, it was relatively straightforward to clean. For those purchasing the Bespoke Jet AI for personal use, Samsung offers a 5-year warranty on the vacuum cleaner itself and a 2-year warranty on the batteries. You can purchase additional Jet AI batteries for a cringe-inducing $200. Even though it's expensive, sometimes good things just are expensive. And for once, I don't mind that the Samsung Bespoke Jet AI Ultra is over $1,000. The vacuum cleaner earns its price: it has a massive 100 minute battery (alongside a 60 minute battery too), it's the most powerful vacuum I've ever used, and does all of that while being super lightweight too. I have nothing bad to say about the Bespoke Jet AI Ultra. I was scratching my head trying to think of cons, and nothing came to me. I loved everything about this vacuum during testing. It sucked up hair, cereal, cat litter, and everyday mess with ease, and made light work of both thick carpets and hardwood floors. If I could keep one vacuum forever, it would be the Bespoke Jet AI Ultra. The results are in: this is the best vacuum in the world.
CNET
3 hours ago
- CNET
Is It Really Safe to Buy an Old or Used Phone? Here's What You Need to Know
The best phones you can buy right now all come with top specs, a plethora of features and pro-level camera systems. But these flagship handsets, like the iPhone 16 Pro and Samsung Galaxy S25 Ultra, also demand a lot of cash if you want to slide them into your pocket. It's no surprise that many of us look toward more affordable options instead of opting for the latest model. You can save a bundle by looking toward used or older devices. After all, older hardware is usually fully capable of handling what you need it to, and it's more environmentally friendly to keep using phones for longer, rather than sending them to landfill. But while these old smartphones might be cheaper, they may not be safe to use, especially if you bought a used phone that's more than a few years old. The problem is that older phones might run outdated versions of Android or iOS, which means they often don't have critical security updates that can keep you and your data safe. If you're concerned about security and privacy -- and you should be -- here are some things to consider. Read more: Make Your Phone Last for Years With These Easy Tips What is a security patch for a phone OS? Hackers are constantly looking for cracks and holes in your phone's software to exploit. Whenever hackers discover a new hole, phone-makers usually get it fixed, and that fix is sent out to your phone to make sure that nobody can take advantage of it. That's a security patch. You'll likely have received plenty of them over time as cybercriminals are always trying to find new ways to circumvent the security on your phone. It's a continual game of cat and mouse, with hackers finding holes and software providers patching them up. And on the cycle goes. Most of the time, you'll never know about it, but it's the thing that's keeping your phone up to date and protected against known threats. Why do manufacturers stop sending out security patches? All manufacturers including Samsung, Sony, Google and OnePlus only provide support to a phone for so long. Each new handset that's released and each new version of Android requires new threat assessment and patching. That's a lot of work, and it means that finding and patching those holes for every single handset spanning years and years just becomes unfeasible. The HTC One M8, released in 2014, is no longer officially supported and doesn't get security patches. Andrew Hoyle/CNET As a result, Google and the phone-makers eventually have to cut off support for older handsets. Those handsets then will no longer receive security updates, meaning that when a threat is detected on that phone, it simply won't be fixed. So is using an out-of-date phone safe? As Christoph Hebeisen, director of the security intelligence company Lookout, explained, "We do not consider it safe to run a device that does not receive security patches. Critical security vulnerabilities become public knowledge every few weeks, or months, and once a system is out of support, then users who continue to run it become susceptible to exploitation of known vulnerabilities." According to Hebeisen, a vulnerable phone could allow full access to everything that's on your phone, including your personal and company emails, contact information, your banking details or audio of your phone calls. A hacker could continue to have access to this information for as long as you continue using the compromised handset. Read more: Best Portable Chargers and Power Banks for Android Phones Check to see if your phone has the latest software installed. Andrew Hoyle/CNET How do I know if my phone is too old? Finding out if your phone is still supported and receiving security patches often isn't straightforward. To start, go into Settings and check your software updates. Install the latest version that's available. Usually it'll give you some indication of when the phone was last updated. If your phone says it has the latest OS software, but that latest version was installed many months or even years ago, it's bad news. Your phone is probably no longer supported. Sadly, manufacturers don't give you a warning that tells you when they've dropped support for a phone, so you either find out through a rude awakening like I mentioned above, or figure it out yourself through some other means. Previously it was common that phones may only be supported for a few years, but thankfully most companies -- including Google and Samsung -- have upped their game, offering support for at least seven years on their recent generations of phone. Google's latest Pixel 9 and 9 Pro will still be safe to use into 2031, while Apple's iPhone XR, released six years ago, is still compatible with the latest version of iOS. Companies such as Fairphone take that even further, promising at least eight years of support, while even budget phones like the Nothing CMF Phone 2 Pro come with six years of support. But longer support periods have been something of a recent trend so if you're buying an older-generation phone on the used market, it's possible its support period may be shorter, and may even be out of support already. Despite having the latest software installed, the last security update for this Galaxy S6 was applied in 2018. That means that there are years of new exploits that this phone is susceptible to. Andrew Hoyle/CNET Finding out if your Android phone is supported will involve some digging. Samsung sent me its list after I contacted its PR team, and it's available online here, and while it makes it clear which phones are currently supported with updates, it doesn't say for how long those updates will continue. Google has a page that clearly tells you when your Pixel or Nexus phone will lose security support. (Spoiler alert: All Nexus and Pixel phones up to and including 2021's Pixel 5A are all out of their official support periods.) Your best place to start is with the support pages on your phone manufacturer's website. You might not notice immediately if your phone is out of date. The most obvious sign you're on old software might be when you look for new apps to download. Many apps will simply be incompatible due to the software and hardware limitations on your phone and you won't be able to install them. How can I tell if my phone has been hacked? Whether you'd ever notice if your phone's security was compromised is difficult to say. Cybercriminals don't exactly make it known they've accessed your device, so you'll need to look for signs. Popups that might appear on the phone are a big giveaway, as are any apps that suddenly appear that you didn't download. Also watch out for unexplained high data usage, as it could be that malicious apps are using a lot of data in the background. Other indicators can also include unusually high battery usage and sluggish performance, but both of these can also be attributed to using older hardware that degrades over time. Read more: Best Android VPNs How can I keep myself safe if I have an old phone? As Hebeisen says, the best way to keep yourself safe is simply to not use a phone that's no longer supported. If you're short on money, can't afford to upgrade just yet or you're using an older phone temporarily for whatever reason, there are a couple of things you can do that could help. The Galaxy S6 was released in 2015 and is no longer officially supported by Samsung. Andrew Hoyle/CNET First, you should make sure the phone has the latest software installed. If you bought it used, make sure to fully factory-reset the phone. Ensure that you only download apps from the Google Play Store (rather than from third-party or unofficial app stores) and certainly avoid installing apps by downloading the APK file from a website. This can often be a way that malicious software weasels its way into a phone. You can help protect your personal information by simply not giving too much away in the first place. Don't do any banking on the phone, don't sync your company email accounts and don't send sexy pictures or have sexy video chats until you're back on a protected device. (Even over a phone, it's important to practice safe sex.) According to Hebeisen, if you don't take such precautions, "this might enable an attacker to observe and manipulate almost everything happening on the device." That's a cold shower, right there.
