<p><a href="https://bitcointalk.org/index.php?topic=83373.new;topicseen#new" rel="nofollow">Here is the complete answer</a> from the forum:</p>

<blockquote>
  <p>When I create an account via my desktop browser, I am assured that the
  password only exists on my browser, and is not saved.</p>
  
  <p>So, if I "pair" an Android device with MyWallet, can or can't I send
  BTC without entering the password?</p>
</blockquote>

<p>Yes you can send BTC without entering the password because the password is contained within the pairing QR Code (The QR Code is constructed using javascript).</p>

<blockquote>
  <p>How does this work with/without a secondary password? What if I first
  installed the Android app, and only then created a secondary password?</p>
</blockquote>

<p>The second password is not contained within the pairing QR Code so you will be prompted to enter it in the iPhone app.</p>

<p>If you set a second password after pairing with only single password after the app syncs the wallet on startup a second password will be required from then on and the original wallet is deleted. If your phone was stolen enabling double encryption doesn't protect your wallet if it was already stored onto the device.</p>

<blockquote>
  <p>Are the files on my Android device / Dropbox encrypted with my first
  password? My second password? Both?</p>
</blockquote>

<p>The wallet format is document here:</p>

<p><a href="https://blockchain.info/wallet/wallet-format" rel="nofollow">https://blockchain.info/wallet/wallet-format</a></p>

<ul>
<li><p>For single encryption the entire JSON payload is encrypted with your first password. </p></li>
<li><p>With double encryption each private key is encrypted first with the second password and then the payload is encrypted with the first password. (In the web interface click [Import / Export] then [Export Unencrypted] and from the select box choose "Leave private keys encrypted" to see the format)</p></li>
</ul>

<p>The wallet is saved in exactly the same way whether stored on the server/app or dropbox.</p>

CC BY-SA 3.0
2012-05-25T09:12:33.337Z
2012-05-25T09:12:33.337Z
ripper234
<p>I think when you scan the QR code, your password is encoded in that barcode, so your Android phone stores it locally.</p>

<p>I haven't tested it myself, but considering this I think you have to enter the secondary password to your Android phone as well. It will either require you to do it every time you make a transaction or remember it for you.</p>

CC BY-SA 3.0
2012-05-25T06:10:12.847Z
It requires it every time. So it seems like you have to use a secondary password if you don't want anyone who picks up your smartphone to be able to empty your wallet.
ripper234
CC BY-SA 3.0
2012-05-24T23:47:09.887Z
2012-05-24T23:47:09.887Z
Steven Roose
<p>When I create an account via my desktop browser, I am assured that the password only exists on my browser, and is not saved.</p>

<p>So, if I "pair" an Android device with MyWallet, can or can't I send BTC without entering the password?</p>

<p>How does this work with/without a secondary password? What if I first installed the Android app, and only then created a secondary password?</p>

<p>Are the files on my Android device / Dropbox encrypted with my first password? My second password? Both?</p>

<blockchain.info><android>
How exactly does MyWallet's Android client work?
ripper234
# How exactly does MyWallet's Android client work?

(Asked by: username_0 on 2012-05-23)

When I create an account via my desktop browser, I am assured that the password only exists on my browser, and is not saved.

So, if I "pair" an Android device with MyWallet, can or can't I send BTC without entering the password?

How does this work with/without a secondary password? What if I first installed the Android app, and only then created a secondary password?

Are the files on my Android device / Dropbox encrypted with my first password? My second password? Both?

**Tags:** blockchain.info, android


---

## 2 answers

### Answer by username_0 on 2012-05-25. Score: 0 | Accepted answer

[Here is the complete answer](https://bitcointalk.org/index.php?topic=83373.new;topicseen#new) from the forum:

> When I create an account via my desktop browser, I am assured that the
> password only exists on my browser, and is not saved.
>
> So, if I "pair" an Android device with MyWallet, can or can't I send
> BTC without entering the password?

Yes you can send BTC without entering the password because the password is contained within the pairing QR Code (The QR Code is constructed using javascript).

> How does this work with/without a secondary password? What if I first
> installed the Android app, and only then created a secondary password?

The second password is not contained within the pairing QR Code so you will be prompted to enter it in the iPhone app.

If you set a second password after pairing with only single password after the app syncs the wallet on startup a second password will be required from then on and the original wallet is deleted. If your phone was stolen enabling double encryption doesn't protect your wallet if it was already stored onto the device.

> Are the files on my Android device / Dropbox encrypted with my first
> password? My second password? Both?

The wallet format is document here:

<https://blockchain.info/wallet/wallet-format>

* For single encryption the entire JSON payload is encrypted with your first password.
* With double encryption each private key is encrypted first with the second password and then the payload is encrypted with the first password. (In the web interface click [Import / Export] then [Export Unencrypted] and from the select box choose "Leave private keys encrypted" to see the format)

The wallet is saved in exactly the same way whether stored on the server/app or dropbox.


---

### Answer by username_1 on 2012-05-24. Score: 1

I think when you scan the QR code, your password is encoded in that barcode, so your Android phone stores it locally.

I haven't tested it myself, but considering this I think you have to enter the secondary password to your Android phone as well. It will either require you to do it every time you make a transaction or remember it for you.

> **Comments:**
> **username_0**: It requires it every time. So it seems like you have to use a secondary password if you don't want anyone who picks up your smartphone to be able to empty your wallet.  

---

