CovPass check app in data protection and privacy test

15 Jul, 2021

Green light for CovPass check app

With the Covpass Check app from the Robert Koch Institute, users can scan digital Covid vaccination certificates (QR code). This allows them to check the validity of the certificate. Our security experts examined the CovPass Check app in terms of data protection and came up with pleasing results.

COVPASS CHECK APP

iOS 1.3.0 | Android 1.16.4

CVSS SCORE

0.0 (low)

U

ANALYSIS RESULT

  • No use of external trackers and analysis tools
  • No transfer of personal information to third parties
  • Access: Camera

Data protection in the CovPass Check app

The app is available for iOS (v 1.3.0) and Android (v 1.16.4) in the common app stores. Our reviewers could not detect any use of trackers and analytics tools to examine user behavior on either operating system. Another positive aspect is that the app does not transmit any user data and only connects to the app manufacturer.

In order to use the CovPass Check app, users have to grant it access to the camera. This enables the scanning of the vaccination certificate (QR code). Since this is an authorization that is necessary for the full functionality of the app, our security experts do not classify the app as overprivileged. However, users should be careful with their QR code and keep it to themselves, as the CovPass Check app can be used by all citizens. When a user scans a vaccination certificate (QR code) with this app, it displays information such as the person’s first and last name, date of birth as well as vaccine and status behind the QR code. This allows sensitive information about any person to be read.

Read here how the CovPass app performs in the data protection test.

CovPass Check app: Our privacy assessment

The data protection experts at mediaTest digital recommend the use of the CovPass Check app not only because of its usefulness in combating the pandemic. The app can also be used with a clear conscience for reasons of data protection. However, citizens should treat their QR code handed out very confidentially for security reasons and not photograph it or anything similar.

Test results: CovPass Check app

Here you can find the detailed test results of the CovPass Check app for iOS and Android.

How secure are Luca, Corona warning app & co.?

In this post on the most important Covid apps you will find the test results of luca, the Corona warning app and more.

CHECKLIST
5 Tips for a secure app selection

Use our checklist to make your own decisions about the use of certain apps in the future. Backed up with tips and explanations, it will help you in the decision-making and app approval process.

App-Auswahl Checkliste sicherer Freigabeprozess

These news might also interest you

Avoiding Cyber Attacks: A 10-step guide for businesses

Avoiding Cyber Attacks: A 10-step guide for businesses

The Russian attack on Ukraine is not only sending uncertainty and fear around the world – it also poses concrete dangers in the form of cyber attacks for cyber security in Europe and Germany. Here’s how companies can protect themselves:

Reface App and Co. – How dangerous are deepfake apps?

Reface App and Co. – How dangerous are deepfake apps?

Reface app in data privacy test A quick swap - and your own face on Vin Diesel's body is already smiling out of the camera. The fact that this is possible is due to the Reface app, a so-called deepfake application that has quickly conquered the top 10 download charts...

You might also be interested in:

Whitepaper how secure is the iOS operating system

Whitepaper: How secure is iOS?

For a long time, the myth was that Apple devices are always secure. Lately, however, Apple seems to be losing its status as an impregnable fortress. Learn how to avoid the risks in our 12-page whitepaper.

Press contact

Karina Quentin | PR & Communication

press@appvisory.com
Telefon +49 (0)511 35 39 94 22
Fax +49 (0)511 35 39 94-12

Newsletter

Exclusive tips and news about apps and mobile security