Separating backup and unlock password is confusing

[mcochior]

Version

3.4.1

Source

Google Play

Vault encryption

Yes

Device

Samsung Galaxy S23+

Android version

Android 15

ROM

No response

Steps to reproduce

What a user might intuitively do to separate the unlock and backup password (and which will NOT actually separate the passwords):

1. Make sure automatic backups are turned off
2. Go to Settings -> Security and Disable “Encryption” under the “Encryption” section
3. Restart the app
4. Now Enable “Encryption” back
5. Put in the backup password
6. Turn on “Separate password for backup & export”
7. Put in the unlock password
8. Create a backup.
9. Delete the app.
10. Install the app and restore the backup.

The above will cause the bug to occur.

Now this is the workaround I managed to find:

1. Make sure automatic backups are turned off
2. Go to Settings -> Security and Disable “Encryption” under the “Encryption” section
3. Restart the app
4. Now Enable “Encryption” back
5. Put in the backup password
6. Turn on “Separate password for backup & export”
7. Put in the backup password (yes, the backup one)
8. Tap on “Change password for backup & export”
9. Put in the backup password (yes, the backup password again)
10. Tap on “Change password” under the “Encryption” section
11. Put in the unlock password
12. Restart the app
13. You can also reinstall the app and restore the encrypted backup using the backup password.

Now the passwords are properly separated. The app can be unlocked using BOTH the backup and unlock password (but I'm not sure that's the intended behavior). Meanwhile, the backup can ONLY be decrypted using the BACKUP password, as it should be.

What do you expect to happen?

I expect the backup and unlock password to be different.

What happens instead?

The unlock password is the only password that can be used to unlock the backup, even though only the backup password should.

Log

No response