thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Android Keystore

An Android system that stores cryptographic keys in a container that makes them hard to extract, often backed by secure hardware.

Definition

Keys can be generated inside the Keystore and used without exposing key material to the app process; on supported devices they are protected by a Trusted Execution Environment or StrongBox secure element. Keys can be bound to user authentication such as biometrics.

Example

An app generates an AES key in the Android Keystore with setUserAuthenticationRequired(true) to encrypt a token.

Exam tip

Use the Keystore for keys; do not hard-code keys in the APK.

Related terms