CODEWITHSUNDEEP
iosiphonesecuritystorage
Sagar D
Sagar D

Reputation: 223

Proper way to store username and password in iOS application

What is the best way to store confidential data like usernames, passwords, etc in an iOS application?

Upvotes: 1

Views: 269

Answers (3)

Dávid Kaszás
Dávid Kaszás

Reputation: 1877

The proper way: Don't. The mobile phone is a very unsecure place to store information. If the security is #1 for you, you should not store sensitive information on the device.

You can use the default iOS security options, for example Keychain with CommonCrypto, or openssl, but your data never will be completely safe without a secure server component.

Keychain has it's very bad quality: It is as secure as the device's passcode.

Upvotes: 0

CSmith
CSmith

Reputation: 13458

Apple provides the keychain for storing sensitive information.

https://developer.apple.com/library/ios/documentation/Security/Conceptual/keychainServConcepts/01introduction/introduction.html#//apple_ref/doc/uid/TP30000897

You should not use NSUserDefaults or CoreData unless you have provided some means of encrypting the content, and even so, you'll still need to manage and store encryption keys securely. The keychain provides all of this for you, and with iOS 8 you can now flag keychain items to require presence of a device passcode if desired.

Upvotes: 2

Sam
Sam

Reputation: 198

Use Encryption for username and password and save in defaults.

Upvotes: 2

Related Questions