Keychain for secure storage in iOS Swift - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ ui_behavior

intermediate

How does Keychain store data securely?

Which statement best describes how the iOS Keychain stores data?

A It saves data as plain text files inside the app's document directory.

B It stores data in UserDefaults but with a password lock.

C It encrypts data and stores it in a secure system area accessible only to the app or authorized apps.

D It sends data to iCloud and retrieves it when needed.

💡 Hint

Think about where sensitive data like passwords should be kept on iOS devices.

The Keychain encrypts data and stores it in a protected area of the device. Only the app or authorized apps can access it, ensuring security.

📝 Syntax

intermediate

What is the correct way to add a password to Keychain in Swift?

Given the following Swift code snippet, which option correctly adds a password string to the Keychain?

let password = "mypassword123"
let account = "[e-mail]"
let service = "com.example.app"

A

let query = [kSecClass: kSecClassGenericPassword, kSecAttrAccount: account, kSecAttrService: service, kSecValueData: password.data(using: .utf16)!]
SecItemAdd(query as CFDictionary, nil)

B

let query: [String: Any] = [kSecClass: kSecClassGenericPassword, kSecAttrAccount: account, kSecAttrService: service, kSecValueData: password]
SecItemAdd(query, nil)

C

let query = ["class": "genericPassword", "account": account, "service": service, "value": password]
SecItemAdd(query, nil)

D

let query: [String: Any] = [kSecClass as String: kSecClassGenericPassword, kSecAttrAccount as String: account, kSecAttrService as String: service, kSecValueData as String: password.data(using: .utf8)!]
SecItemAdd(query as CFDictionary, nil)

💡 Hint

Remember the password must be converted to Data using UTF-8 encoding before storing.

Keychain expects the password as Data type encoded in UTF-8. The keys must be cast to String and the dictionary passed as CFDictionary.

❓ lifecycle

advanced

When is Keychain data accessible to an app?

Consider an app that stores a password in Keychain with kSecAttrAccessibleAfterFirstUnlock. When can the app access this data?

A Only when the device is unlocked for the first time after reboot, and afterwards even if locked.

B Only while the app is running in the foreground.

C Only when the device is unlocked and the app is active.

D At any time, even if the device is locked or rebooted.

💡 Hint

Think about the meaning of AfterFirstUnlock accessibility option.

The kSecAttrAccessibleAfterFirstUnlock option allows access after the device has been unlocked once after reboot, even if it is locked later.

🔧 Debug

advanced

Why does this Keychain query fail to find stored data?

Given this Swift code to retrieve a password from Keychain, why does it fail to find the stored password?

let query: [String: Any] = [kSecClass as String: kSecClassGenericPassword, kSecAttrAccount as String: "[e-mail]", kSecReturnData as String: true]
var item: CFTypeRef?
let status = SecItemCopyMatching(query as CFDictionary, &item)

A The <code>kSecReturnData</code> key should be false to retrieve the password.

B The query is missing the <code>kSecAttrService</code> key, so it does not match the stored item.

C The <code>item</code> variable is not initialized to nil before the call.

D The <code>kSecClass</code> value should be <code>kSecClassInternetPassword</code> instead.

💡 Hint

Think about what keys were used when storing the password.

If the stored item included kSecAttrService, the query must include it to find the exact match.

🧠 Conceptual

expert

What is the main advantage of using Keychain over UserDefaults for sensitive data?

Why should developers prefer Keychain instead of UserDefaults to store passwords or tokens?

A Keychain encrypts data and restricts access based on device security, while UserDefaults stores data unencrypted and accessible to anyone with device access.

B UserDefaults automatically syncs data across devices, but Keychain does not support syncing.

C Keychain is faster to read and write data than UserDefaults.

D UserDefaults requires explicit user permission to store data, Keychain does not.

💡 Hint

Consider the security and privacy differences between the two storage methods.

Keychain encrypts and protects sensitive data using device security features. UserDefaults stores data in plain text and is not secure for sensitive info.