Question

I’m doing an app that needs to connect with a login form to the web. I’d like to store these informations, my questions are:

A) Is it safe to store these data into NSUserDefaults?

B) Should I use CoreData?

C) Is there safer method?

Answer 1

CoreData is not secure unless you encrypt the data within it.

KeyChainAccess is apparently secure. There is some useful code to access it here:

https://github.com/ldandersen/scifihifi-iphone

You just need the two files under the the security folder.

You can then use these helper calls:

+ (NSString *) getPasswordForUsername: (NSString *) username andServiceName: (NSString *) serviceName error: (NSError **) error;
+ (BOOL) storeUsername: (NSString *) username andPassword: (NSString *) password forServiceName: (NSString *) serviceName updateExisting: (BOOL) updateExisting error: (NSError **) error;
+ (BOOL) deleteItemForUsername: (NSString *) username andServiceName: (NSString *) serviceName error: (NSError **) error;