Data Encryption on Android

on YouTube ↗23m

" summary

Practical guide to encrypting Android app data with Jetpack Security: use the MasterKeys helper to create AES-256-GCM keys backed by the AndroidKeyStore, opt into StrongBox or deviceUnlockRequired for hardware protection, and manage rotation via KeySet. Store blobs with EncryptedFile streaming and prefs with EncryptedSharedPreferences (deterministic key encryption, AAD tied to filenames). Jetpack Security uses Tink as the crypto engine, targets Marshmallow+ today (KitKat/Lollipop via RSA planned), and pairs client checks (SafetyNet, Protected Confirmation) with server-side validation.

AI-written summary · about

" chapters (11)

1. 0:00Introduction and welcome
2. 2:08Jetpack Security overview
3. 5:16Encrypted files and shared preferences
4. 8:04Tink library integration
5. 11:13Ph2 and anti-phishing
6. 13:40SafetyNet for device integrity
7. 16:10Single sign-on and Chrome Custom Tabs
8. 17:15Protected confirmation with Titan key
9. 18:18Advanced Android KeyStore configurations
10. 20:01Manage configurations for EMM
11. 21:46Permanently private apps

" related talks

• 18mJetpack Security Extension Overview, Data-at-rest and in-transitNicole Borrelli · droidcon SF 2019
• 28mModern security for Android DevelopersDinorah Tovar · Android Summit 2020
• 30mSecurity at your fingertipsFrederik Schweiger · droidcon Berlin 2016
• 42mEncrypting Files on AndroidAndrey Matyushin · Mobius 2024 Spring
• 43mSecurity First Android AppsTarika Chawla · droidcon San Francisco 2022
• 47mSecuring Android Applications, The Right WayDario Incalza · Android Summit 2016
• 40mBEST PRACTICES FOR ANDROID ENTERPRISE APPLICATION DEVELOPMENTJon Markoff · droidCon NYC 2018
• 43mSecurity First Android AppsTarika Chawla · droidcon Berlin 2022