ios-security

Consolidate iOS security best practices for Keychain, biometrics, and Secure Enclave.

Updated Apr 19, 2026

Search Tags:#biometrics #secure-coding #keychain #ats #ios-security #cryptokit #secure-enclave

Ready to run

npx skills add https://github.com/femitz/flyby --skill ios-security-femitz

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ios-security
Source: https://github.com/femitz/flyby/tree/main/.agents/skills/ios-security
Command: npx skills add https://github.com/femitz/flyby --skill ios-security-femitz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Secure handling of sensitive data and authentication in iOS apps, consolidating best practices for Keychain, CryptoKit, biometrics, and Secure Enclave into a reusable security framework.

Core Features & Use Cases

Keychain & Data Protection: secure storage of credentials and secrets with appropriate accessibility.
Biometrics & LAContext: integrate Face ID / Touch ID with fallback policies.
ATS & Pinning Guidance: enforce secure network configurations and certificate pinning patterns.
Secure Coding & Privacy Manifests: align with privacy requirements and secure coding standards.
Use Case: implement a secure login flow that stores tokens in Keychain and validates biometrics before token retrieval.

Quick Start

Configure a secure login workflow using Keychain, biometrics, and CryptoKit while validating PrivacyInfo requirements.

Frequently Asked Questions about ios-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I securely store authentication tokens in the iOS Keychain?▼

To securely store tokens in the iOS Keychain, you must apply appropriate accessibility attributes and file protection rules. This framework consolidates keychain usage rules to ensure credentials and secrets are safely stored with proper access policies.

How does LAContext handle Face ID authentication with a fallback policy?▼

LAContext integrates Face ID and Touch ID biometric authentication by defining fallback policies for secure token retrieval. It aligns biometric usage descriptions with privacy requirements to validate user identity before accessing sensitive data.

What's the best way to configure App Transport Security and certificate pinning in iOS?▼

Configuring App Transport Security (ATS) and certificate pinning involves enforcing secure network configurations and pinning patterns. This framework provides guidance to apply these secure network standards across iOS projects to protect data in transit.

Can I use CryptoKit with the Secure Enclave for protecting cryptographic keys?▼

Yes, CryptoKit works with the Secure Enclave to protect cryptographic operations and key material. This framework provides CryptoKit guidance and Secure Enclave integration patterns to ensure hardware-level security for your iOS applications.

Do I need a privacy manifest for secure coding compliance in iOS apps?▼

A privacy manifest is required to align with privacy requirements and secure coding standards. This framework helps validate PrivacyInfo requirements and consolidates secure coding practices to ensure your iOS app meets data protection regulations.