This issue relates to #202 and #396.
When importing a key from a third-party app, KeePass2Android prompts to save the key to shared storage, where it is accessible to all installed apps with shared storage permissions, as well as potentially over a USB tether. Only later are you able to import it to internal storage.
After later importing the key to internal storage in the app settings, the user must remember to delete the key from shared storage, and even then, it may be accessible via unerase tools.
When being prompted where to save your key file during import, 'internal storage' should be an option.
This would enable getting the key through the third-party app method (which may be a remote source such as MEGA or BoxCryptor) without the key file ever hitting the shared storage.
When importing a key from a third-party app, KeePass2Android prompts to save the key to shared storage, where it is accessible to all installed apps with shared storage permissions, as well as potentially over a USB tether. Only later are you able to import it to internal storage.
After later importing the key to internal storage in the app settings, the user must remember to delete the key from shared storage, and even then, it may be accessible via unerase tools.
When being prompted where to save your key file during import, 'internal storage' should be an option.
This would enable getting the key through the third-party app method (which may be a remote source such as MEGA or BoxCryptor) without the key file ever hitting the shared storage.