{"id":2235,"date":"2018-07-23T18:15:02","date_gmt":"2018-07-23T18:15:02","guid":{"rendered":"https:\/\/ionicframework.com\/?p=2235"},"modified":"2019-03-28T19:33:12","modified_gmt":"2019-03-28T19:33:12","slug":"announcing-ionic-identity-vault-secure-biometric-authentication-for-your-mobile-app","status":"publish","type":"post","link":"https:\/\/ionic.io\/blog\/announcing-ionic-identity-vault-secure-biometric-authentication-for-your-mobile-app","title":{"rendered":"Announcing Ionic Identity Vault: Secure Biometric Authentication for Your Mobile App"},"content":{"rendered":"

Today I\u2019m excited to announce a new product that the Ionic team has been working hard on over the last few months: Ionic Identity Vault<\/a>. Identity Vault improves frontend security for any of your Ionic apps by making it easy to add secure biometric authentication in minutes, using the latest in native security best practices.<\/p>\n

It all started after we met with a number of large enterprise development teams who had the same complaint: “frontend security is painful and we don\u2019t even know if we\u2019re doing it right”. Specifically, what\u2019s the best way to enable secure biometrics like FaceID and TouchID, and how do we safely secure authentication tokens on a device?<\/p>\n

That started us on a journey to find the answers that ultimately led to Identity Vault.<\/p>\n

What\u2019s at stake when it comes to frontend security?<\/h2>\n

If a device falls into the wrong hands and an app is left running or a security token is compromised, users could be vulnerable to data loss and unauthorized access to their accounts. That could be really bad for users, and even worse for the integrity of your backend systems and data.<\/p>\n

Bottom line: If you\u2019re storing tokens on-device (from any<\/em> backend auth service), you need to protect your users at the device level. Ionic Identity Vault solves that by providing out-of-the-box enterprise grade frontend storage and session features.<\/p>\n

<\/p>\n

Why Identity Vault?<\/h2>\n

It turns out that many frontend authentication workflows use unsecure practices like storing tokens unencrypted (such as in LocalStorage) or using weak authentication logic (such as using disparate Cordova plugins) that are easily compromised.<\/p>\n

\"iv

Identity Vault keeps users protected with the latest in multi-layer native security and best practices for storing authentication data on-device. You can boost your app security by adding Vault to any new or existing Ionic apps in minutes.<\/p>\n

Identity Vault offers secure enterprise-grade storage out-of-the-box.<\/p>\n

What You Get with Identity Vault<\/h2>\n

\"what-you-get\"

Identity Vault is built and supported by Ionic\u2019s native mobile experts. It offers the latest in biometric authentication, using powerful encryption to securely store tokens at-rest. Always-on Session Management safeguards users even when they\u2019re not using the app, combining background screen protection with automatic logout when the app is inactive.<\/p>\n

Identity Vault is a subscription service that includes ongoing maintenance and updates to keep your apps secure and compatible with the latest iOS and Android versions. It works on the frontend of your app and is compatible with any backend service provider, such as AWS or Azure.<\/p>\n

Identity Vault also brings over a dozen native APIs together under one plugin roof. Built and maintained by the Ionic team, it\u2019s programmed utilizing security APIs and best practices straight from Apple and Google.<\/p>\n

Out of the box, you\u2019ll get:<\/h3>\n