# iOS Realm Database Without Encryption

> Detects iOS Realm database instances configured without encryption key.

- Skill: `zakirkun/ios-realm-database-without-encryption` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add zakirkun/ios-realm-database-without-encryption`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zakirkun/ios-realm-database-without-encryption/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: zakirkun (https://skillmd.com/u/zakirkun)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zakirkun/ios-realm-database-without-encryption

---


# iOS Realm Database Without Encryption

## Overview
Realm database files are stored unencrypted by default. On jailbroken devices or after physical extraction, these files can be opened directly. Sensitive user data (including PII, financial data, health records) stored in unencrypted Realm databases is exposed.

## Remediation
- Configure Realm with an encryption key stored in the iOS Keychain
- Generate a 64-byte key using SecRandomCopyBytes
- Store the key with `kSecAttrAccessibleWhenUnlockedThisDeviceOnly`