topic Re: Mobile apps encryption at rest key management in Tech Talk

Mobile apps encryption at rest key management

Deyan — Fri, 28 Dec 2018 11:59:53 GMT

Hello community,

I am struggling for some time now to find out details around how software encryption (on an app for example) works on a mobile device. I am especially interested in how the device manages the key used to encrypt given data. Is that key also encrypted with something and how it is protected. I imagine that at some point the encryption keys are encrypted with the user's unlock/PIN or something but I just assume. I would appreciate your thoughts or directions as to where I could find that. Thanks.

Re: Mobile apps encryption at rest key management

AlecTrevelyan — Fri, 28 Dec 2018 15:34:49 GMT

I guess it depends on the app and the mobile OS involved.

Here's a link that discusses WhatsApp key management on Android that might give you some pointers:

https://security.stackexchange.com/questions/136072/how-can-whatsapp-restore-local-or-google-drive-backups

Re: Mobile apps encryption at rest key management

Deyan — Wed, 02 Jan 2019 08:49:04 GMT

Thanks @AlecTrevelyan - I will review.

Re: Mobile apps encryption at rest key management

thomasbuff — Mon, 16 Jun 2025 06:39:32 GMT

Encryption at rest and solid key management are crucial for apps like Carrier Hub, especially on T-Mobile devices where background services handle network configuration and VoIP support. Proper encryption ensures sensitive carrier data stays protected even if the device is compromised — especially important for carrier hub t mobile.