iOS Realm Database Without Encryption

Detects iOS Realm database instances configured without encryption key.

zakirkun 11af74e 2 files · 1.4 KB Updated

File contents

iOS Realm Database Without Encryption

Overview

Realm database files are stored unencrypted by default. On jailbroken devices or after physical extraction, these files can be opened directly. Sensitive user data (including PII, financial data, health records) stored in unencrypted Realm databases is exposed.

Remediation

  • Configure Realm with an encryption key stored in the iOS Keychain
  • Generate a 64-byte key using SecRandomCopyBytes
  • Store the key with kSecAttrAccessibleWhenUnlockedThisDeviceOnly

zakirkun/ice-tea/tree/main/skills/mobile/ios/realm-unencrypted commit 11af74e16b

Frequently asked questions

npx skillmds@latest add zakirkun/ios-realm-database-without-encryption