Reputation: 685
Storing sensitive data in keychain is a best practice in iOS. But using a jailbroken device an attacker can dump all the keychain data. (keychain-dumper)
Can anyone help me understand how to protect the data in a keychain, in case of a jailbroken device.
Upvotes: 1
Views: 6126
Reputation: 111
You can implement your own custom encryption on top of Keychain to enhance security. For example, encrypt passwords with a magic method before storing them in Keychain. (Then try to obfuscate that method to minimize chances of reverse-engineering it.)
Upvotes: 0
Reputation: 19996
It's not possible. If the device is jailbroken all data can be easily accessed.
Upvotes: 4