ios-security

SKILL.md

Secure iOS apps with Keychain, CryptoKit, biometric authentication, and Apple security best practices.

Covers Keychain Services for credential storage, Data Protection file classes, and CryptoKit for encryption, hashing, and HMAC operations

Includes Secure Enclave key storage, biometric authentication with LocalAuthentication (Face ID/Touch ID), and LAContext configuration

Enforces App Transport Security (ATS) requirements, certificate pinning patterns, and explains kSecAttrAccessible values for different sensitivity levels

Provides secure coding patterns: input validation, sensitive data clearing, logging rules, and jailbreak detection; includes privacy manifest and App Review compliance checklist

iOS Security

Guidance for handling sensitive data, authenticating users, encrypting
correctly, and following Apple's security best practices on iOS.

Contents

Keychain Services

Data Protection

CryptoKit

Secure Enclave

Biometric Authentication

App Transport Security (ATS)

Certificate Pinning

Secure Coding Patterns

Privacy Manifests

Common Mistakes

Review Checklist

References