Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is React Native's Async Storage secure?

I want to store sensitive data locally in a React Native app.

Is the data only available to the app that wrote it?

like image 991
yogiben Avatar asked Aug 25 '16 15:08

yogiben


People also ask

Can async storage be used to securely store data locally?

As described on React Native's website: “AsyncStorage is an unencrypted, asynchronous, persistent, key-value storage system that is global to the app.” It's a mouthful. But simply put, it allows you to save data locally on the user's device.

Is React Native keychain secure?

Android - Keystore​ react-native-encrypted-storage - uses Keychain on iOS and EncryptedSharedPreferences on Android. react-native-sensitive-info - secure for iOS, but uses Android Shared Preferences for Android (which is not secure by default).

Is React Native async storage deprecated?

Deprecated. Use one of the community packages instead. AsyncStorage is an unencrypted, asynchronous, persistent, key-value storage system that is global to the app. It should be used instead of LocalStorage.


1 Answers

AsyncStorage is not suitable for storing sensitive information. You might find this useful: https://github.com/oblador/react-native-keychain

It uses facebook conceal/android keystore to store encrypted data to SharedPreferences (Android) and keychain on iOS. (I co-authored the lib). Be sure to read the entire readme to understand what it offers.

like image 127
vonovak Avatar answered Oct 01 '22 19:10

vonovak