Android Keystore
Also called: Keystore
Android's system for storing cryptographic keys so apps can use them but not extract them.
Definition
Keys can require the user to authenticate (fingerprint or PIN) before each use. Adding a new fingerprint can invalidate them, which is a useful test case.
In practice
After adding a new fingerprint, the banking app asks for the password again because its key was invalidated.
Related terms
- Biometric authenticationUnlocking a saved login with Face ID, Touch ID or a fingerprint.
- Secure EnclaveAn isolated security area inside Apple's chips that protects biometric data and keys; apps never see its contents.
- KeychainiOS secure storage for small secrets like tokens and passwords; items can survive uninstalling the app.