Question

I have created an application in which I have used base64 encoding and save the user password into NSUSerDefaults, But somehow another iPhone developer breaks that password. I wonder how could he got NSUserDefaults Data? Does someone knows how to stop this critical thing and also how he had got the NSUserDefaults Data. Also what is the best encryption method to store user password in iphone ?

Answer 1

I suggest you check out SFHFKeychainUtils. It wraps up the Keychain Services API and provides a very simple interface to store sensitive information like passwords.

Store you password:

NSError * error;
[SFHFKeychainUtils storeUsername:userName andPassword:password forServiceName:@"whatever_service" updateExisting:YES error:&error];

Get your password back:

NSError * error;
password= [[SFHFKeychainUtils getPasswordForUsername:userName andServiceName:@"whatever_service" error:&error] retain];

You can also clear the stored value using the deleteItemForUsername message if you need to log the user out.