A major flaw in Samsung’s Secure Folder lets anyone with physical access peek at stored apps and photos, especially in work profiles.

Whether set up by a company or through third-party apps, work profiles break Secure Folder’s defenses, putting sensitive data at risk.

Apps inside Secure Folder can also be spotted through the system’s Permission Manager, revealing their presence.

Turns out, Samsung’s Secure Folder might not be the digital fortress we all thought it was. A fresh discovery has uncovered a major security gap, especially when it comes to work profiles. This flaw throws a wrench in the idea that your stuff is completely locked down.

A Reddit user has uncovered a flaw that lets anyone with physical access to your phone peek into apps and photos stored in Samsung’s Secure Folder (via Android Authority). The issue is tied to work profiles, which allow files to be pulled from Secure Folder without needing extra authentication.

This security flaw isn’t just limited to work profiles set up by companies: it also affects those created through third-party apps. That means the Secure Folder’s defenses are pretty much busted, except when accessed from personal profiles. This puts sensitive data at risk, especially if someone with admin access—like an employer’s IT team—digs into the work profile.