Keychain Unlocked: Mastering Advanced Security for Smarter, Safer Apps

The keychain services API helps you store sensitive data by giving your app a mechanism to store small bits of user data in an encrypted database called a keychain. When you securely remember the password for them, you free the user to choose a complicated one.
Because of the API complexity, most of the developers end up using a 3rd party library or a wrapper to simplify working with the Keychain.
Let's take a look under the hood of the iOS or macOS Keychain by implementing our own wrapper and review a few more advanced use-cases, such as protecting the secrets with the biometric access (LocalAuthentication framework) and sharing keychain between multiple apps or app extension with the help of the Keychain Sharing Groups or Application Security Groups.

The slide deck for this talk is available at https://github.com/richardtop/Speaking


Relevant documentation:
Keychain Services API:
https://developer.apple.com/documenta...

Storing Keys in Keychain:
https://developer.apple.com/documenta...

Keychain Data Protection:
https://support.apple.com/en-ae/guide...


Subscribe and ring the bell to not miss next tutorials and iOS-related content. Have a suggestion? Leave it in the comments.

Follow Richard on social media:
Telegram: https://t.me/richardtop
GitHub: https://github.com/richardtop/
Twitter:   / richardtop_ios  



Timecodes:
0:00 Intro
0:49 Agenda & Recap
2:00 API Overview
2:23 Pros & Cons
3:35 Keychain Wrappers
4:25 API in Detail
5:44 Converting OSStatus error codes to Swift errors
7:35 Storing Data
9:57 Removing Data
11:05 Setting Data
11:44 Getting Data
12:57 Other Data Types
14:35 Codable
15:41 Keychain Sharing
18:54 Case Studies
19:55 Erasing data on reinstallation
23:25 Biometrics
27:58 Conclusion