Protecting local information.
WHAT TO STORE IN SECURE STORAGE
Authentication tokens Credentials Encryption keys Anything sensitive
WHAT SECURE STORAGE PROVIDES
Encryption, with keys held in hardware where available, and access tied to device unlock.
WHAT NOT TO USE FOR SENSITIVE DATA
Simple preference storage Plain files Logs
WHY NOT LOGS
They may be readable by other applications or included in diagnostics.
WHAT TO MINIMISE
What you store at all.
WHY
Data not stored cannot be extracted.
WHAT TO CONSIDER
Whether data needs to persist between sessions.
WHAT TO ENCRYPT
Any local database containing personal data.
WHAT TO EXCLUDE FROM BACKUPS
Anything sensitive that should not leave the device.
WHY
Backups are stored elsewhere and restored to other devices.
WHAT TO CLEAR ON SIGN-OUT
All local data belonging to that user.
WHY
Devices are shared, and the next user must not see it.
WHAT TO TEST
That signing out genuinely removes data.
