Also, you can store keys in something like the IOS keychain (which I assume is fairly secure) and then further require a pin code or password when you open the

Also, you can store keys in something like the IOS keychain (which I assume is fairly secure) and then further require a pin code or password when you open the app. Thinking off the top of my head: priv_key = AES_DECRYPT(PBKDF2(pincode,salt),iv,RSA_key_from_keychain) aes_key = rsa_decrypt(priv_key,encrypted_aes_key)