Secrets in Apps: Insights on security and risk management (new article)

Does your app handle secrets? Most likely your app’s ecosystem needs to handle passwords/credentials, tokens, API and access keys, cryptographic keys, certificates, and/or sensitive user data. If those get inappropriately disclosed, there can be a huge impact on you and your users. To help, you may want to read our new primer on secrets in apps, with background and strategies for managing the associated security risks. You can read it here on the Secure by Design Education Hub.

2 Likes