OWASP Mobile Application Security (MASVS and MASTG)
OWASP's mobile security project: the MASVS standard lists what a secure app must do for storage, cryptography, authentication, network communication and platform interaction, and the MASTG testing guide shows how to check each one on Android and iOS. Use it to decide where tokens and personal data may live, and as a checklist before release.
Guide
Other
OWASP
Reference
Intermediate
Free
OWASP's mobile security project: the MASVS standard lists what a secure app must do for storage, cryptography, authentication, network communication and platform interaction, and the MASTG testing guide shows how to check each one on Android and iOS. Use it to decide where tokens and personal data may live, and as a checklist before release.
Ready to start?
Opens on OWASP in a new tab.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
Follow along
New writing, resources and project ideas land here first.