device-integrity

You verify iOS app integrity and prevent fraud using Apple DeviceCheck by retrieving per-device bits via DCDevice to check simple flags like promotional offer eligibility or detect compromised devices against Apple's servers.

The best way to protect sensitive API endpoints on iOS is by requiring App Attest assertions generated via DCAppAttestService, cryptographically proving app authenticity using Secure Enclave keys before allowing access to critical data.

App Attest validates app authenticity by generating cryptographic keys in the Secure Enclave and using Apple's attestation service to prove app integrity, ensuring requests originate from unmodified app instances on genuine devices.

Yes, you can use DeviceCheck and App Attest together for fraud prevention by combining DCDevice per-device bits for simple flag tracking with DCAppAttestService Secure Enclave key-based attestation for validating high-value API requests.

You should use DeviceCheck per-device bits instead of App Attest assertions when you need simple, persistent flags for tasks like promotional offer claims, reserving App Attest for cryptographic protection of sensitive API endpoints.

No, device integrity verification requires server-side validation against Apple's servers to confirm the authenticity of DeviceCheck bits and App Attest attestation or assertion payloads generated by the iOS client.