Android Keystore & iOS Keychain

Instructions

Prefer hardware-backed keys for any long-lived cryptographic material. The key should never leave the secure element.

1. Why Hardware-Backed Keys

• Key material is non-extractable — a rooted / jailbroken device still cannot export the raw bytes from StrongBox or the Secure Enclave.
• OS enforces access policies (user auth, invalidation on biometric enrollment change).
• Compliance frameworks (PCI, FIDO2) increasingly require it.

2. Android: Generate a Key