Trust & compliance
Security & Privacy glossary
Mobile app security, authentication, encryption, GDPR, and privacy engineering terms.
All terms in Security & Privacy
Showing 1–15 of 56 terms · page 1 of 4
Security & Privacy
OWASP Mobile Top 10
OWASP Mobile Top 10 is a security and privacy concept for prioritizing the most common mobile security risks from OWASP guidance so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Certificate Pinning
Certificate Pinning is a security and privacy concept for binding app TLS connections to expected server certificate keys so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
TLS HTTPS Only
TLS HTTPS Only is a security and privacy concept for requiring encrypted HTTPS for all network traffic so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Man-in-the-Middle Attack Mobile
Man-in-the-Middle Attack Mobile is a security and privacy concept for defending against intercepted traffic on untrusted networks so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Secure Storage Mobile
Secure Storage Mobile is a security and privacy concept for storing tokens and secrets in Keychain, Keystore, or encrypted prefs so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Biometric Authentication
Biometric Authentication is a security and privacy concept for using Face ID or fingerprint for convenient re-auth on device so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Face ID Authentication
Face ID Authentication is a security and privacy concept for integrating Apple Face ID for secure local authentication so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Fingerprint Authentication
Fingerprint Authentication is a security and privacy concept for using Touch ID or Android fingerprint APIs for quick unlock so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Passkeys WebAuthn
Passkeys WebAuthn is a security and privacy concept for replacing passwords with phishing-resistant passkeys via WebAuthn so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Two Factor Authentication App
Two Factor Authentication App is a security and privacy concept for requiring a second factor beyond password for sensitive accounts so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
OTP One Time Password
OTP One Time Password is a security and privacy concept for validating short-lived codes for login or transaction approval so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
SMS OTP Risk
SMS OTP Risk is a security and privacy concept for understanding SIM swap and SS7 risks of SMS-based codes so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Session Hijacking
Session Hijacking is a security and privacy concept for preventing stolen session tokens from impersonating users so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Token Expiration Strategy
Token Expiration Strategy is a security and privacy concept for setting access token lifetimes balanced with UX and risk so mobile products protect users and meet trust expectations.
Read definitionSecurity & Privacy
Refresh Token Security
Refresh Token Security is a security and privacy concept for protecting and rotating refresh tokens on server and client so mobile products protect users and meet trust expectations.
Read definitionExplore topics related to OWASP Mobile Top 10
Server stack
Backend & Firebase
Firebase, Postgres, serverless APIs, auth, and mobile backend infrastructure terms.
Apple platform
iOS Development
Swift, SwiftUI, TestFlight, StoreKit, and the Apple release stack.
Google platform
Android Development
Kotlin, Compose, Play Console, billing, and Android release mechanics.