Securing your app for work - Enterprise Dev Training

Many developers struggle to encrypt data properly. In this episode, Jon Markoff (jonmarkoff@) will teach you how to use Jetpack Security to add an extra layer of security and data protection to your apps!
Jetpack Security library → goo.gle/2U6AJqZ
Check out Jon’s blog post → goo.gle/2Vw3KNu
Enterprise Dev Training → goo.gle/3eKzvcJ
Subscribe to the Android Developers channel → goo.gle/Androi...
#Featured #Jetpack #EnterpriseDevTraining

[@JennaEzarik]

This was super helpful! Thanks Jon!

[@ecx007]

ooh ok!😂

[@iJustine]

ah this helped me so much on my latest project thank you

[@9Ayir]

I didn't expect to see you here 😅😂

[@alexeys.7829]

Thanks. Its so cool. When I tried to add encryption to my project it blow my mind. I hope with jetpack it will be much easier.

[@masdzulfikar6201]

When will the support for Kitkat+ come?

[@you-me-we]

Does it support phones without google playStore? (Like Xiaomi, Huawei and some others)

[@ac130kz]

tldr just use AES-256 in a modern secure mode with hardware backed keys

[@bishnuabhay350]

Assets folder can be secure use this code in android application using through android studio

[@skalexander2594]

Please help me my Nokia 7plus so many problems

[@jvcma157]

MasterKeys is deprecated on 1.1.0, MasterKeys is replaced for MasterKey.Builder right?

[@ineffable6362]

This confused me too! It does appear that MasterKey.Builder has replaced it. Try using: val masterKey = MasterKey.Builder(this).setKeyGenParameterSpec(advancedSpec).build()

[@jvcma157]

@@ineffable6362 Yes, in the project I used the masterkey build itself by setting the MasterKey.KeyScheme AES256_GCM normally, and creating an alias of my own.

[@jvcma157]

@@ineffable6362 MasterKey.Builder ends up doing behind the hood what we were doing before with MasterKeys.getOrCreate()...

[@ineffable6362]

@@jvcma157 True, however to set things such as enabling StronBox for devices above Android P you need to use the builder like shown in the video. Kinda annoying they would show an OUTDATED way of programming on such an important video

[@jvcma157]

@@ineffable6362 I managed to set the strongbox using MasterKey.builder too

[@MostafaAnter]

What about encrypt strings values as Base URL string to prevent my data if some one try to decompile my app

[@odifek]

You can only encrypt your data at runtime and not compile time. You have to find another way to secure your static data. Like url, api keys, etc

[@404nauman]

Simply put in build gradle

[@0x4ym4n]

Putting it on build gradle is still be accessible by the unauthorized parties after decompiling it

[@404nauman]

@@0x4ym4n well, i don't think. Put baseurl in build gradle and turn on proguard, you won't be able to read with apktools and normal online decompilers.

[@MostafaAnter]

I'm using "String care" library to encrypt my important data with signing key and put encrypted data inside NDK method so it so hard to decompile and rebuild of course you need my signing key this way work perfectly with me, but I wonder if there is build in method to encrypte string value with signing key or my fingerprint nested use string care frame work😅

[@mursalcabdurahman2432]

Good.evening

[@HenryLetting]

In the nick of time.