iOS × Security
iOS Security
We track 15 iOS Security case studies from 12 engineering teams. Bumble, PickMe and AWS write about it most. Many posts also cover Developer Tools and Networking. The posts run from 2013 to 2026. The newest is from August 2026.
iOS Security articles 1–15 of 15
Protect your Flutter iOS apps with Shorebird Obfuscation
Shorebird just launched obfuscation for Flutter iOS apps. If you're shipping sensitive code or worried about reverse engineering, this changes the game.
Why Your Mobile App Is Not as Secure as You Think
Pavithra Chamod J from PickMe Engineering drops a hard truth: your mobile app's security measures are probably theater. Once an APK hits a rooted device, all bets are off.
Xcode 26: Enhanced Security for iOS Apps
Timothy Werquin from Guardsquare reveals why Apple's new Xcode 26 'enhanced security' features miss the most common iOS app threats. While exploit mitigation sounds impressive, the real danger lies elsewhere.
Cross-Platform Web3 dApps With React Native
Callstack explores how React Native is becoming the unexpected bridge between traditional mobile development and the Web3 ecosystem. Building decentralized apps just got a lot more practical.
Memory Safety, Ecosystem Talks, and Java Interoperability at FOSDEM 2025
Swift just made a major statement at FOSDEM 2025, and it's not just about iOS anymore. The language is pushing hard into memory safety, embedded systems, and even Java interoperability.
SecureStorage in Swift: A Safer Alternative to AppStorage
Kcrdissanayake from PickMe Engineering reveals why SwiftUI's AppStorage is a security risk for sensitive data. Their solution? A custom property wrapper that encrypts everything before it hits storage.
Consent Matters
Swiggy's Android team faced a UX dilemma: auto-reading OTPs felt magical to some users, creepy to others. How do you balance convenience with transparency?
Validating Social Media URLs in Swift
Alvin Matthew Pratama from Tokopedia tackles a deceptively complex problem: validating social media URLs when each platform has wildly different URL structures. Regex alone won't cut it.
SwiftNIO SSH Implementation
Cory Benfield from Apple's Cloud Services team just open-sourced SwiftNIO SSH, bringing programmatic SSH capabilities to Swift. Think libssh2, not openssh: this isn't a ready-made client, it's the building bloc...
Your next upgrade deserves an upgrade
Signal just solved one of iOS's most frustrating problems: losing your encrypted message history when you upgrade devices. imperiopolis walks through how they built a secure, local device-to-device transfer tha...
iOS Code Signing Best Practices
Minyoung Sim from LINE breaks down iOS code signing in forensic detail, revealing how Apple's security mechanism validates every app before execution. This isn't your typical overview.
Amplify Framework adds authentication features and enhancements for iOS and Android Mobile SDKs
AWS Amplify just made mobile authentication dramatically simpler. Device tracking, OAuth 2.0, and SAML federation now work out of the box for iOS and Android developers.
Universal Links for Android and iOS
Konstantin Yakushev from Bumble reveals the brutal truth about universal links: Apple and Google's 'simple' solution is riddled with undocumented bugs that break user experience. Here's how Badoo's team catalog...
Code Signing and Distributing Swift Applications
The Badoo iOS team learned the hard way: adopting Swift in 2015 meant navigating undocumented code signing nightmares that crashed enterprise apps at runtime. Here's what broke and how they fixed it.
Login Verification On Twitter For iPhone And Android
Twitter built a 2FA system where your private keys never leave your phone and the server stores no persistent secrets. Here's the engineering behind it: