Securing your app for work - Enterprise Dev Training

[@JennaEzarik]

This was super helpful! Thanks Jon!

[@ecx007]

ooh ok!😂

[@iJustine]

ah this helped me so much on my latest project thank you

[@9Ayir]

I didn't expect to see you here 😅😂

[@ac130kz]

tldr just use AES-256 in a modern secure mode with hardware backed keys

[@masdzulfikar6201]

When will the support for Kitkat+ come?

[@alexeys.7829]

Thanks. Its so cool. When I tried to add encryption to my project it blow my mind. I hope with jetpack it will be much easier.

[@you-me-we]

Does it support phones without google playStore? (Like Xiaomi, Huawei and some others)

[@jvcma157]

MasterKeys is deprecated on 1.1.0, MasterKeys is replaced for MasterKey.Builder right?

[@ineffable6362]

This confused me too! It does appear that MasterKey.Builder has replaced it. Try using: val masterKey = MasterKey.Builder(this).setKeyGenParameterSpec(advancedSpec).build()

[@jvcma157]

@@ineffable6362
Yes, in the project I used the masterkey build itself by setting the MasterKey.KeyScheme AES256_GCM normally, and creating an alias of my own.

[@jvcma157]

@@ineffable6362
MasterKey.Builder ends up doing behind the hood what we were doing before with MasterKeys.getOrCreate()...

[@ineffable6362]

@@jvcma157 True, however to set things such as enabling StronBox for devices above Android P you need to use the builder like shown in the video. Kinda annoying they would show an OUTDATED way of programming on such an important video

[@jvcma157]

@@ineffable6362
I managed to set the strongbox using MasterKey.builder too

[@bishnuabhay350]

Assets folder can be secure use this code in android application using through android studio

[@skalexander2594]

Please help me my Nokia 7plus so many problems

[@MostafaAnter]

What about encrypt strings values as Base URL string to prevent my data if some one try to decompile my app

[@odifek]

You can only encrypt your data at runtime and not compile time. You have to find another way to secure your static data. Like url, api keys, etc

[@404nauman]

Simply put in build gradle

[@0x4ym4n]

Putting it on build gradle is still be accessible by the unauthorized parties after decompiling it

[@404nauman]

@@0x4ym4n well, i don't think. Put baseurl in build gradle and turn on proguard, you won't be able to read with apktools and normal online decompilers.

[@MostafaAnter]

I'm using "String care" library to encrypt my important data with signing key and put encrypted data inside NDK method so it so hard to decompile and rebuild of course you need my signing key this way work perfectly with me, but I wonder if there is build in method to encrypte string value with signing key or my fingerprint nested use string care frame work😅

[@mursalcabdurahman2432]

Good.evening

[@HenryLetting]

In the nick of time.