Android Expert·Oct 30Behind the Prompt: What Android Really Does When Your App Asks “Is This You?”How BiometricPrompt, the Keystore and secure hardware really work, and the Kotlin patterns and failure modes that matter after release.
Android Expert·Oct 22A Locked Drawer Beats a Closed One: Encrypting Auth Tokens Before They Reach DataStoreUse Android Keystore or Tink to encrypt tokens at rest, with idiomatic Kotlin and the backup, key, and IV failures that bite in production.
Android Expert·Sep 23Part 7: Secure Storage — Encryption Is a Key-Custody ProblemThreat modeling for client devices, why the Android Keystore turns hardware security into an operational recovery problem, envelope…
Android Expert·Aug 28Part 2 — System Constraints: What Android Actually Lets You DoWhy Doze mode, key invalidation, and IPC boundaries wreck production crypto — and how senior Android engineers design around them.
Android Expert·Aug 28Part 1: Encryption Is a Systems Problem, Not a Cipher ChoiceWhy AES-256 isn’t the hard part — key custody, OS lifecycle, and hardware IPC are what actually break in production.