Question

Currently we are developing a track and trace app for our company. To make this app more secure we would like to to ask the user at first launch for a security code. This security code will most likely be the customer number.

Ones the user sends a request to the server with his trace and trace code the server will check if the security code and the track and trace code are linked.

My question is what would be the best way to store the security code in the app so that the app can ask for it ones a track and trace gets send to the server. We want the user to enter the security code only at first start.

[[NSUserDefaults standardUserDefaults] boolForKey:@"security code"];

would this be an option?

Answer 1

For any secure data you wish to store on the device, I strongly advise you use the Keychain. You can then check for the code’s existence within the keychain, and use that if it’s available.

See the following documentation below to get you on your feet with the Keychain!

Keychain Concepts https://developer.apple.com/library/ios/#documentation/security/Conceptual/keychainServConcepts/02concepts/concepts.html#//apple_ref/doc/uid/TP30000897-CH204-TP9

How to implement on iOS https://developer.apple.com/library/ios/#documentation/security/Conceptual/keychainServConcepts/iPhoneTasks/iPhoneTasks.html

Reference https://developer.apple.com/library/ios/#documentation/security/Reference/keychainservices/Reference/reference.html#//apple_ref/doc/uid/TP30000898

Sample Project https://developer.apple.com/library/ios/#samplecode/GenericKeychain/Introduction/Intro.html#//apple_ref/doc/uid/DTS40007797