Android Webview private browsing

Question

I am using webview in my android app to fetch some webpages from multiple sites. I have some doubts regarding webview behavior

Does webview store history, cookies, form autofill information? If yes, can we stop it from doing that?
If Webview is storing cookies, does it share cookies with other normal browsers on phone (can info stored in cookie for a website xyz when opened using webview, be used when user tries to open website from another browser on phone)?

i think webview won't store because its not a browser it just render webpage. — Yugandhar Babu, Mar 22 '12 at 09:26

score 25 · Accepted Answer · edited Aug 17 '19 at 11:49

P1. Does WebView store history, cookies, form autofill information? If yes, can we stop it from doing that?

[Ans] Yes, WebView stores hisotry/ cookies and autofill.

To stop:

//Make sure No cookies are created
CookieManager.getInstance().setAcceptCookie(false); 

//Make sure no caching is done
myWebView.getSettings().setCacheMode(WebSettings.LOAD_NO_CACHE);
myWebView.getSettings().setAppCacheEnabled(false);
myWebView.clearHistory();
myWebView.clearCache(true); 


//Make sure no autofill for Forms/ user-name password happens for the app
myWebView.clearFormData();
myWebView.getSettings().setSavePassword(false);
myWebView.getSettings().setSaveFormData(false);

P2. If WebView is storing cookies, does it share cookies with other normal browsers on phone (can info stored in cookie for a website xyz when opened using 'WebView`, be used when user tries to open website from another browser on phone)?

[Ans] No. Information is not shared with other phone browsers.

It's `WebSettings.LOAD_NO_CACHE` instead of `mWebView.getSettings().LOAD_NO_CACHE` — woprandi, Jan 17 '19 at 11:10
What about 3rd-party cookies? If I'm using an app that uses the system webview to render various sites (such as an RSS reader), can I avoid being tracked? — z0r, Feb 05 '22 at 23:42

score 5 · Answer 2 · edited May 23 '17 at 10:30

5

Yes, the webview can store history, cookies and form autofill information, but they would be available only locally to your app, not systemwide. You can also manage the cookies, using tips from this other SO answer
Like mentioned above, nothing stored by the webview in your app will be shared with the other browsers on the phone.

edited May 23 '17 at 10:30

Community

1
1

answered Mar 22 '12 at 09:37

zrgiu

6,200
1
33
35

3

`myWebView.clearFormData();` does not clear form data - use `WebViewDatabase.getInstance(this).clearFormData()` instead – Vitaly Kushner Sep 30 '13 at 14:31

Android Webview private browsing

2 Answers2

Linked