How can we know that our keyboard is not a keylogger?

**nuthinbutnikk** · 09-09-2010, 05:37 PM

Lots of keyboard out there available for download in market or outside android market. How can we know whether that keyboard has a keylogger or not?
every keyboard i know requires us to allow our personal information (read contact data, read user defined dictionary) and full internet acces. what if one of them is a keylogger app?

**rattos** · 09-09-2010, 05:39 PM

id love to know that too as ive tried to use droidwall but couldnt find the keyboard app
please help loads of people want to know (i think)

**minus30** · 09-09-2010, 05:58 PM

I guess you could test this by monitoring the network traffic generated when typing. For example, you can start typing a doc anything offline, and see if there are connections being generated by your phone.
Of course this is not foolproof. The keylogger might store everything in a file and upload it when the phone is inactive/at night/when connected to 3G/...

I'm sure there is software for android for monitoring connections and traffic.

**ker0ltjuh** · 09-09-2010, 06:36 PM

when you install a keybord and it needs internet permission it's fake but i use LatinIME and Smart keybord and i trust them

**H3LLBOY911** · 09-09-2010, 06:39 PM

You can trust Swype atlest.

**Double** · 09-12-2010, 09:15 PM

Wearing a tin-foil hat might help?

**mr_smith** · 09-12-2010, 09:25 PM

The HTC_IME mod keyboard doesn't need internet access, so it's okay.

**Private** · 06-01-2011, 04:05 PM

and how you know that your computer will be safe as well. do you prefer save you private information on android and the fact is we stored our information to google, or you save all your information on PC and that goes to microsoft or open source. seriously, even the hacker will use your toilet to stole your information. hahaha... lol

trust me there is nothing safe today

**fixmeimbroken** · 06-01-2011, 06:45 PM

If it's the code for the keyboard is Open Source and there are other developers who have looked at it, then it's probably safe. For closed-source keyboards, that might be more difficult. You could install something like Shark to capture packets and examine it later to see if anything is being sent out. However, you can't assume that the keylogger will send everything over the wire as soon as it captures it. More likely it will save it in a file somewhere and then send it off maybe once a week or something so you won't see any activity immediately unless you monitor the device for an extended period of time. Also, if I wrote a keylogger, I would send the captured data off when there's a lot of Internet activity going on to make it more difficult to detect.

**sophie** · 08-25-2011, 08:11 AM

Originally Posted by nuthinbutnikk

Lots of keyboard out there available for download in market or outside android market. How can we know whether that keyboard has a keylogger or not?
every keyboard i know requires us to allow our personal information (read contact data, read user defined dictionary) and full internet acces. what if one of them is a keylogger app?

i know many keylogger are undetectable, and you need to make it unclosed by press the old password, but how can the people who install it on your PC tell you the password, once, i guess some had install a keylogger on my computer, then i reset my computer,it's not a nice choice. How can we know whether that keyboard has a keylogger or not? how to uninstall it ? kindly help