◆ Sparround

Security & Fintech

0%

The security backbone of banking apps: Keystore, certificate pinning, biometrics, app hardening and fintech practices.

⬜

1. Secure storage: Keystore, EncryptedSharedPreferences

security
⬜

2. Network security: TLS, certificate pinning

securitynetworking
⬜

3. Biometric authentication

security
⬜

4. App hardening: root detection, Play Integrity, R8, FLAG_SECURE

security
⬜

5. Fintech practices: sessions, sensitive data, compliance

securityfintech

🎯 Stage assignment

Stage assignment — "a security audit" (3-4 hours).

Go through your own project (or the app you built across these stages) as an auditor and write a findings report:

  • Storage: read shared_prefs and DB files via adb shell run-as — any plaintext sensitive data? Move the token into EncryptedSharedPreferences.
  • Network: intercept traffic with a proxy; add pinning (with a backup pin) and confirm the traffic dies.
  • Screen: FLAG_SECURE on sensitive screens, check the recents preview.
  • Build: R8 on, mapping.txt archived, logging disabled in release.
  • Backup: allowBackup/dataExtractionRules reviewed.
  • Session: the inactivity lock works and logout clears all local data.

Done when: you have a table with a "state / risk / fix" row per item. In the interview, that table is your answer to "how did you secure the banking app".