Why Should Developers Protect App-Specific Data Stored in Memory using Android Memory Encryption?
In order to function, every mobile app needs to store many different kinds of data in memory (RAM) while the application is being used. This can include user data, strings including credentials, passwords, or keys, and other application-specific data, such as mobile game values, scores, in-app purchase data and more. Cybercriminals often target a running application’s memory and attempt to harvest, access or modify data while it is transiently stored in memory, for example by dumping the application memory while the data is in use. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the application crashes, or if the programmer does not properly clear the memory before freeing it.
What is Android Memory Encryption?
Using Appdome Android Memory Encryption, Android mobile app and game developers can protect the data stored in RAM by encrypting the data while the app is being used. Android Memory Encryption encrypts app-specific data stored in the application’s memory during runtime. This prevents malicious actors from accessing or attempting to modify the application’s memory in order to cheat in games, steal user information, or modify mobile app functionality, logic or behavior while the app is being used.
Appdome is a no-code mobile app security platform designed to add security features, like Android Memory Encryption to any Android app without coding. This KB shows mobile developers, DevSec and security professionals how to use Appdome’s simple ‘click to build’ user interface to quickly and easily encrypt app-specific data in Android apps.
3 Easy Steps to add Android Memory Encryption to any Android app
Please follow these 3 easy steps to protect Android apps against piracy using Android Memory Encryption
- Upload an Android App to Appdome’s no code security platform (.apk or .aab)
- In the Build Tab, under Anti-Fraud, Select Mobile Fraud Prevention and Toggle on Android Memory Encryption (shown below)
- Click Build My App
Congratulations! The Android app is now protected with Android Memory Encryption. 
Appdome’s no-code mobile app security platform offers mobile developers, DevSec and security professionals a convenient and reliable way to protect Android apps using Android Memory Encryption. When a user clicks “Build My App,” Appdome leverages a microservice architecture filled with 1000s of security plugins, and an adaptive code generation engine that matches the correct required plugins to the development environment, frameworks, and methods in each app.
Prerequisites to Android Memory Encryption
- Appdome account (If you don’t have an Appdome account, create a free Appdome account here)
- Mobile App (.apk or .aab for Android, .ipa for iOS)
- A license for Android Memory Encryption
- Signing Credentials (e.g., signing certificates and provisioning profile)
No Coding Dependency
How to Sign & Publish Secured Mobile Apps Built on Appdome
After successfully securing your app using Appdome, there are several available options to complete your project, depending on your app lifecycle or workflow. These include:
- Signing Secure iOS and Android apps
- Customizing, Configuring & Branding Secure Mobile Apps
- Deploying/Publishing Secure mobile apps to Public or Private app stores
Or, see this quick reference Releasing Secured Android & iOS Apps built on Appdome.
More Mobile App Security Resources
Here are a few related resources:
How to Encrypt App-Specific Data Stored in Memory for iOS apps
Check out Mobile Fraud Prevention or request a demo at any time.
If you have any questions, please send them our way at support@appdome.com or via the chat window on the Appdome platform.
Thank you!
Thanks for visiting Appdome! Our mission is to secure every app on the planet by making mobile app security easy. We hope we’re living up to the mission with your project. If you don’t already have an account, you can sign up for free.
