Secure Handling of Access Key

[matjua17]

Hi!

I am retrieving the access keys from the backend during the app’s first launch and storing it in encrypted local storage (using MMKV). However, I am looking for a secure way to handle this process, as storing the key in the .env file or embedding it directly in the app does not feel secure.

What is the best way to securely pass and handle this?

[ajakka]

Hey @matjua17

Given how HERE implements their security measures, it's really hard to dynamically assign access keys to the library, the app will crash instantly.

However if you have any ideas or suggestions to improve this aspect, I'm open for the discussion.