{"id":4269193,"date":"2022-11-07T20:26:22","date_gmt":"2022-11-07T18:26:22","guid":{"rendered":"https:\/\/www.dept.global\/insight\/mobile-app-security-best-practices-for-product-managers\/"},"modified":"2025-12-08T13:39:13","modified_gmt":"2025-12-08T11:39:13","slug":"mobile-app-security-best-practices-for-product-managers","status":"publish","type":"article","link":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/","title":{"rendered":"Mobile app security best practices for product managers"},"content":{"rendered":"<div class=\"block-article-post-header js-block-article-post-header block-article-post-header__theme--onyxGrey\">\n\t<a\tclass=\"cta-button block-article-post-header__back-button cta-button__color--white cta-button__style--back\" href=\"https:\/\/www.dept.global\/all-insights\/\" aria-label=\"Back\" >\n\t<svg width='41' height='41' viewBox='0 0 41 41' fill='none' xmlns='http:\/\/www.w3.org\/2000\/svg'><circle cx='20.5' cy='20.5' r='19.5' transform='rotate(-90 20.5 20.5)' stroke='var(--dept-button-icon-outline-color)' stroke-width='1.3' stroke-miterlimit='10' fill='none'\/><circle class='icon-backplate' cx='20.5' cy='20.5' r='19.5' transform='rotate(-90 20.5 20.5)' fill='var(--dept-button-icon-backplate-color)' fill-opacity='1'\/><path class='icon-center' d='M21.174 30 11 20.674l10.174-9.326m-9.326 9.328H30.5' stroke='var(--dept-button-icon-color)' stroke-width='1.3' stroke-miterlimit='10' fill='none'\/><\/svg>\n\t\t\t<span>\n\t\t\tBack to all articles\t\t<\/span>\n\t\n<\/a><h1\t\tclass=\"typography block-article-post-header__title typography__color--white typography__size--h1 typography__align--left\"\n\t\t\t>\n\t\tMobile app security best practices for product managers\t<\/h1><div\n\t\tclass=\"image-wrap block-article-post-header__image-wrap\"\n\t\tdata-align=\"center center\"\n\t\t\t>\n\n\t\t\t<picture\n\t\tclass=\"image__picture\"\n\t\t\t\t>\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t<img\n\t\t\t\tsrc=\"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security.jpg\"\n\t\t\t\tclass=\"image block-article-post-header__image\"\n\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tloading=\"lazy\"\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\/>\n\t\t<\/picture>\n\t\n\t<\/div><div class=\"author block-article-post-header__author\" data-animation=\"slide-fade\">\n\t\t\t<img\n\t\t\tclass=\"author__portrait\"\n\t\t\tsrc=\"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/Paul-calnan-150x150.jpeg\"\n\t\t\talt=\"Paul Calnan\"\n\t\t\/>\n\t\n\t<div class=\"author__text\">\n\t\tPaul Calnan\t\t<br \/>\n\t\tiOS Platform Lead\n\t\t\t<\/div>\n<\/div>\n\t<div class=\"block-article-post-header__meta\">\n\t\t\t\t\t\t\t<div class=\"block-article-post-header__meta-date\">\n\t\t\t\t<div class=\"block-article-post-header__date-description\">\n\t\t\t\t\tDate\t\t\t\t<\/div>\n\t\t\t\t<div class=\"block-article-post-header__published-date\">\n\t\t\t\t\t7 November 2022\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t<\/div>\n<\/div>\n\n<div\n\t\tclass=\"image-wrap block-image__image-wrap\"\n\t\tdata-align=\"center center\"\n\t\t\t>\n\n\t\t\t<picture\n\t\tclass=\"image__picture\"\n\t\t\t\t>\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t<img\n\t\t\t\tsrc=\"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security.jpg\"\n\t\t\t\tclass=\"image block-image__image\"\n\n\t\t\t\t\t\t\t\talt=\"mobile app security\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tloading=\"lazy\"\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\/>\n\t\t<\/picture>\n\t\n\t<\/div>\n\n<div class=\"block-title-and-content js-block-title-and-content block-title-and-content__theme--white\">\n\t<div class=\"block-title-and-content__layout\">\n\t\t\n\t\t\t\t\t<div class=\"block-title-and-content__content\">\n\t\t\t\t\n<p\t\tclass=\"typography block-typography__typography typography__color--onyxGrey typography__size--regular-body typography__align--left\"\n\t\t\t>\n\t\tYour customers entrust you with a considerable amount of private information within your apps.\u00a0<br><br>A single data breach by a malicious third party can result in both reputational and legal problems for your app and company, not to mention the costly effort of finding and fixing the exploited vulnerability.\u00a0<br><br>That is why product teams must be diligent in practicing good in-app security hygiene. Here are some best practices to follow that will help you to minimize the number of security vulnerabilities in your app<em>.\u00a0<\/em><br><br><em>Please note, though, that this is far from an exhaustive list of security considerations, and each app\u2019s security requirements are different.<\/em>\t<\/p>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\t<div class=\"block-title-and-content__social-links\">\n\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"copy\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Copy page link\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tdata-tooltip=\"true\"\n\t\t\t\t\tdata-tooltip-text=\"Link copied to clipboard.\"\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg' width='22' height='22' viewBox='0 0 22 22'><path d='M6.832 15.167l8.333-8.333M9.332 6.001l2.787-2.787a4.715 4.715 0 016.666 0v0a4.715 4.715 0 010 6.667L16 12.668M5.999 9.334l-2.787 2.787a4.715 4.715 0 000 6.666v0a4.715 4.715 0 006.667 0l2.787-2.786' stroke='currentColor' stroke-width='2'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"facebook\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Facebook\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='14' height='22' viewBox='0 0 14 22' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M4.032 22L4 12H0V8h4V5.5C4 1.789 6.298 0 9.61 0c1.585 0 2.948.118 3.345.17v3.88H10.66c-1.8 0-2.15.856-2.15 2.112V8h5.241l-2 4H8.51v10H4.032z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"whatsapp\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Whatsapp\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg xmlns='http: \/\/www.w3.org\/2000\/svg' width='25' height='24' viewBox='0 0 25 24'><path d='M.805 24l1.687-6.163a11.869 11.869 0 01-1.588-5.945C.907 5.335 6.244 0 12.801 0c3.182.001 6.17 1.24 8.415 3.488a11.819 11.819 0 013.481 8.413c-.002 6.558-5.34 11.893-11.896 11.893h-.005c-1.99-.001-3.947-.5-5.685-1.448L.805 24zm6.598-3.807l.361.214a9.874 9.874 0 005.033 1.378h.004c5.45 0 9.885-4.434 9.888-9.885a9.824 9.824 0 00-2.894-6.993 9.823 9.823 0 00-6.99-2.898c-5.454 0-9.89 4.434-9.892 9.884a9.86 9.86 0 001.512 5.26l.235.374-.999 3.648 3.742-.982z' fill='currentColor'\/><path d='M9.825 6.921c-.24-.58-.486-.501-.668-.51-.174-.009-.372-.01-.57-.01-.198 0-.52.074-.793.371-.272.298-1.04 1.017-1.04 2.48 0 1.462 1.065 2.875 1.214 3.073.148.199 2.096 3.2 5.078 4.487.709.306 1.262.49 1.694.626.712.226 1.36.194 1.872.118.571-.085 1.759-.72 2.007-1.413.247-.694.247-1.29.173-1.413-.074-.124-.272-.199-.57-.347-.297-.149-1.758-.868-2.03-.967-.273-.1-.471-.149-.67.149-.198.297-.767.966-.94 1.165-.174.198-.348.223-.645.074-.297-.149-1.255-.462-2.39-1.475-.884-.788-1.48-1.76-1.654-2.058-.173-.298-.018-.459.13-.607.134-.133.298-.347.446-.52.149-.174.199-.298.298-.496.099-.198.05-.372-.025-.52-.074-.15-.669-1.612-.917-2.207z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F&#038;text=Mobile%20app%20security%20best%20practices%20for%20product%20managers\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"twitter\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Twitter\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='25' height='20' viewBox='0 0 25 20' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M24.75 2.3c-.9.4-1.8.7-2.8.8 1-.6 1.8-1.6 2.2-2.7-1 .6-2 1-3.1 1.2-.9-1-2.2-1.6-3.6-1.6-2.7 0-4.9 2.2-4.9 4.9 0 .4 0 .8.1 1.1-4.2-.2-7.8-2.2-10.2-5.2-.5.8-.7 1.6-.7 2.5 0 1.7.9 3.2 2.2 4.1-.8 0-1.6-.2-2.2-.6v.1c0 2.4 1.7 4.4 3.9 4.8-.4.1-.8.2-1.3.2-.3 0-.6 0-.9-.1.6 2 2.4 3.4 4.6 3.4-1.7 1.3-3.8 2.1-6.1 2.1-.4 0-.8 0-1.2-.1 2.2 1.4 4.8 2.2 7.5 2.2 9.1 0 14-7.5 14-14v-.6c1-.7 1.8-1.6 2.5-2.5z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"linkedin\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Linkedin\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='19' height='18' viewBox='0 0 19 18' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M1.15 17.3h3.6V5.8h-3.6v11.5zM.75 2.1c0 1.2 1 2.1 2.1 2.1 1.2 0 2.1-.9 2.1-2.1 0-1.2-1-2.1-2.1-2.1-1.2 0-2.1 1-2.1 2.1zM14.45 17.3h3.6v-6.2c0-3.1-.7-5.5-4.3-5.5-1.8 0-2.9.9-3.4 1.8V5.8h-3.4v11.5h3.6v-5.7c0-1.5.2-2.9 2.1-2.9 1.8 0 1.8 1.7 1.8 3v5.6z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t<\/div>\n<\/div>\n\n<div class=\"block-title-and-content js-block-title-and-content block-title-and-content__theme--onyxGrey\">\n\t<div class=\"block-title-and-content__layout\">\n\t\t<h2\t\tclass=\"typography block-title-and-content__title typography__color--white typography__size--h2 typography__align--left\"\n\t\tdata-size-mobile=\"h2\" \t>\n\t\tBalance app security with usability\t<\/h2>\n\t\t\t\t\t<div class=\"block-title-and-content__content\">\n\t\t\t\t\n<p\t\tclass=\"typography block-typography__typography typography__color--bodyOnBlack typography__size--regular-body typography__align--left\"\n\t\t\t>\n\t\tUser authentication sits squarely at the intersection of security and usability. <br><br>Many apps require their users to log in before using the app. In some cases (for example, social media apps), users only need to log in once and the app keeps those credentials until they are changed elsewhere. In other cases (for example, banking apps), users need to log in and enter their passwords every time they open the app.<br><br>When <a href=\"https:\/\/www.dept.global\/en-us\/service\/engineering\/web-mobile-app-engineering\/\">building an app<\/a>, you need to balance security with usability. <br><br>Requiring a password to enter an app increases security but also increases friction. Biometrics like Touch ID or Face ID make this easier on the user but can complicate the user experience. You need to design when biometrics will be used, how it interacts with your username-and-password-based login screen, and what to do when biometrics fail or are unavailable.\t<\/p>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\t<div class=\"block-title-and-content__social-links\">\n\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"copy\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Copy page link\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tdata-tooltip=\"true\"\n\t\t\t\t\tdata-tooltip-text=\"Link copied to clipboard.\"\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg' width='22' height='22' viewBox='0 0 22 22'><path d='M6.832 15.167l8.333-8.333M9.332 6.001l2.787-2.787a4.715 4.715 0 016.666 0v0a4.715 4.715 0 010 6.667L16 12.668M5.999 9.334l-2.787 2.787a4.715 4.715 0 000 6.666v0a4.715 4.715 0 006.667 0l2.787-2.786' stroke='currentColor' stroke-width='2'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"facebook\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Facebook\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='14' height='22' viewBox='0 0 14 22' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M4.032 22L4 12H0V8h4V5.5C4 1.789 6.298 0 9.61 0c1.585 0 2.948.118 3.345.17v3.88H10.66c-1.8 0-2.15.856-2.15 2.112V8h5.241l-2 4H8.51v10H4.032z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"whatsapp\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Whatsapp\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg xmlns='http: \/\/www.w3.org\/2000\/svg' width='25' height='24' viewBox='0 0 25 24'><path d='M.805 24l1.687-6.163a11.869 11.869 0 01-1.588-5.945C.907 5.335 6.244 0 12.801 0c3.182.001 6.17 1.24 8.415 3.488a11.819 11.819 0 013.481 8.413c-.002 6.558-5.34 11.893-11.896 11.893h-.005c-1.99-.001-3.947-.5-5.685-1.448L.805 24zm6.598-3.807l.361.214a9.874 9.874 0 005.033 1.378h.004c5.45 0 9.885-4.434 9.888-9.885a9.824 9.824 0 00-2.894-6.993 9.823 9.823 0 00-6.99-2.898c-5.454 0-9.89 4.434-9.892 9.884a9.86 9.86 0 001.512 5.26l.235.374-.999 3.648 3.742-.982z' fill='currentColor'\/><path d='M9.825 6.921c-.24-.58-.486-.501-.668-.51-.174-.009-.372-.01-.57-.01-.198 0-.52.074-.793.371-.272.298-1.04 1.017-1.04 2.48 0 1.462 1.065 2.875 1.214 3.073.148.199 2.096 3.2 5.078 4.487.709.306 1.262.49 1.694.626.712.226 1.36.194 1.872.118.571-.085 1.759-.72 2.007-1.413.247-.694.247-1.29.173-1.413-.074-.124-.272-.199-.57-.347-.297-.149-1.758-.868-2.03-.967-.273-.1-.471-.149-.67.149-.198.297-.767.966-.94 1.165-.174.198-.348.223-.645.074-.297-.149-1.255-.462-2.39-1.475-.884-.788-1.48-1.76-1.654-2.058-.173-.298-.018-.459.13-.607.134-.133.298-.347.446-.52.149-.174.199-.298.298-.496.099-.198.05-.372-.025-.52-.074-.15-.669-1.612-.917-2.207z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F&#038;text=Mobile%20app%20security%20best%20practices%20for%20product%20managers\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"twitter\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Twitter\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='25' height='20' viewBox='0 0 25 20' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M24.75 2.3c-.9.4-1.8.7-2.8.8 1-.6 1.8-1.6 2.2-2.7-1 .6-2 1-3.1 1.2-.9-1-2.2-1.6-3.6-1.6-2.7 0-4.9 2.2-4.9 4.9 0 .4 0 .8.1 1.1-4.2-.2-7.8-2.2-10.2-5.2-.5.8-.7 1.6-.7 2.5 0 1.7.9 3.2 2.2 4.1-.8 0-1.6-.2-2.2-.6v.1c0 2.4 1.7 4.4 3.9 4.8-.4.1-.8.2-1.3.2-.3 0-.6 0-.9-.1.6 2 2.4 3.4 4.6 3.4-1.7 1.3-3.8 2.1-6.1 2.1-.4 0-.8 0-1.2-.1 2.2 1.4 4.8 2.2 7.5 2.2 9.1 0 14-7.5 14-14v-.6c1-.7 1.8-1.6 2.5-2.5z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"linkedin\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Linkedin\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='19' height='18' viewBox='0 0 19 18' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M1.15 17.3h3.6V5.8h-3.6v11.5zM.75 2.1c0 1.2 1 2.1 2.1 2.1 1.2 0 2.1-.9 2.1-2.1 0-1.2-1-2.1-2.1-2.1-1.2 0-2.1 1-2.1 2.1zM14.45 17.3h3.6v-6.2c0-3.1-.7-5.5-4.3-5.5-1.8 0-2.9.9-3.4 1.8V5.8h-3.4v11.5h3.6v-5.7c0-1.5.2-2.9 2.1-2.9 1.8 0 1.8 1.7 1.8 3v5.6z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t<\/div>\n<\/div>\n\n<div class=\"block-title-and-content js-block-title-and-content block-title-and-content__theme--white\">\n\t<div class=\"block-title-and-content__layout\">\n\t\t<h2\t\tclass=\"typography block-title-and-content__title typography__color--onyxGrey typography__size--h2 typography__align--left\"\n\t\tdata-size-mobile=\"h2\" \t>\n\t\tProtect user-generated information\t<\/h2>\n\t\t\t\t\t<div class=\"block-title-and-content__content\">\n\t\t\t\t\n<p\t\tclass=\"typography block-typography__typography typography__color--onyxGrey typography__size--regular-body typography__align--left\"\n\t\t\t>\n\t\tApps are built to handle user-generated information. This can be any data that the user enters into the app. This can also include any information related to the user that gets pulled down from the network.\u00a0<br><br>If the information is stored on the device, you should use the highest encryption setting possible given other requirements (see <a href=\"https:\/\/engineering.dept.global\/securely-storing-data-on-ios\">this article for details<\/a>). <br><br>Be aware that the networking subsystem of your app may cache network requests and responses. If this contains sensitive data, you will need to adjust your cache policy or encrypt the cache. Usernames, passwords, cryptographic keys, and other highly sensitive data should only be stored in secure storage, like the iOS Keychain.\t<\/p>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\t<div class=\"block-title-and-content__social-links\">\n\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"copy\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Copy page link\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tdata-tooltip=\"true\"\n\t\t\t\t\tdata-tooltip-text=\"Link copied to clipboard.\"\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg' width='22' height='22' viewBox='0 0 22 22'><path d='M6.832 15.167l8.333-8.333M9.332 6.001l2.787-2.787a4.715 4.715 0 016.666 0v0a4.715 4.715 0 010 6.667L16 12.668M5.999 9.334l-2.787 2.787a4.715 4.715 0 000 6.666v0a4.715 4.715 0 006.667 0l2.787-2.786' stroke='currentColor' stroke-width='2'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"facebook\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Facebook\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='14' height='22' viewBox='0 0 14 22' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M4.032 22L4 12H0V8h4V5.5C4 1.789 6.298 0 9.61 0c1.585 0 2.948.118 3.345.17v3.88H10.66c-1.8 0-2.15.856-2.15 2.112V8h5.241l-2 4H8.51v10H4.032z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"whatsapp\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Whatsapp\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg xmlns='http: \/\/www.w3.org\/2000\/svg' width='25' height='24' viewBox='0 0 25 24'><path d='M.805 24l1.687-6.163a11.869 11.869 0 01-1.588-5.945C.907 5.335 6.244 0 12.801 0c3.182.001 6.17 1.24 8.415 3.488a11.819 11.819 0 013.481 8.413c-.002 6.558-5.34 11.893-11.896 11.893h-.005c-1.99-.001-3.947-.5-5.685-1.448L.805 24zm6.598-3.807l.361.214a9.874 9.874 0 005.033 1.378h.004c5.45 0 9.885-4.434 9.888-9.885a9.824 9.824 0 00-2.894-6.993 9.823 9.823 0 00-6.99-2.898c-5.454 0-9.89 4.434-9.892 9.884a9.86 9.86 0 001.512 5.26l.235.374-.999 3.648 3.742-.982z' fill='currentColor'\/><path d='M9.825 6.921c-.24-.58-.486-.501-.668-.51-.174-.009-.372-.01-.57-.01-.198 0-.52.074-.793.371-.272.298-1.04 1.017-1.04 2.48 0 1.462 1.065 2.875 1.214 3.073.148.199 2.096 3.2 5.078 4.487.709.306 1.262.49 1.694.626.712.226 1.36.194 1.872.118.571-.085 1.759-.72 2.007-1.413.247-.694.247-1.29.173-1.413-.074-.124-.272-.199-.57-.347-.297-.149-1.758-.868-2.03-.967-.273-.1-.471-.149-.67.149-.198.297-.767.966-.94 1.165-.174.198-.348.223-.645.074-.297-.149-1.255-.462-2.39-1.475-.884-.788-1.48-1.76-1.654-2.058-.173-.298-.018-.459.13-.607.134-.133.298-.347.446-.52.149-.174.199-.298.298-.496.099-.198.05-.372-.025-.52-.074-.15-.669-1.612-.917-2.207z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F&#038;text=Mobile%20app%20security%20best%20practices%20for%20product%20managers\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"twitter\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Twitter\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='25' height='20' viewBox='0 0 25 20' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M24.75 2.3c-.9.4-1.8.7-2.8.8 1-.6 1.8-1.6 2.2-2.7-1 .6-2 1-3.1 1.2-.9-1-2.2-1.6-3.6-1.6-2.7 0-4.9 2.2-4.9 4.9 0 .4 0 .8.1 1.1-4.2-.2-7.8-2.2-10.2-5.2-.5.8-.7 1.6-.7 2.5 0 1.7.9 3.2 2.2 4.1-.8 0-1.6-.2-2.2-.6v.1c0 2.4 1.7 4.4 3.9 4.8-.4.1-.8.2-1.3.2-.3 0-.6 0-.9-.1.6 2 2.4 3.4 4.6 3.4-1.7 1.3-3.8 2.1-6.1 2.1-.4 0-.8 0-1.2-.1 2.2 1.4 4.8 2.2 7.5 2.2 9.1 0 14-7.5 14-14v-.6c1-.7 1.8-1.6 2.5-2.5z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"linkedin\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Linkedin\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='19' height='18' viewBox='0 0 19 18' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M1.15 17.3h3.6V5.8h-3.6v11.5zM.75 2.1c0 1.2 1 2.1 2.1 2.1 1.2 0 2.1-.9 2.1-2.1 0-1.2-1-2.1-2.1-2.1-1.2 0-2.1 1-2.1 2.1zM14.45 17.3h3.6v-6.2c0-3.1-.7-5.5-4.3-5.5-1.8 0-2.9.9-3.4 1.8V5.8h-3.4v11.5h3.6v-5.7c0-1.5.2-2.9 2.1-2.9 1.8 0 1.8 1.7 1.8 3v5.6z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t<\/div>\n<\/div>\n\n<div class=\"block-title-and-content js-block-title-and-content block-title-and-content__theme--onyxGrey\">\n\t<div class=\"block-title-and-content__layout\">\n\t\t<h2\t\tclass=\"typography block-title-and-content__title typography__color--white typography__size--h2 typography__align--left\"\n\t\tdata-size-mobile=\"h2\" \t>\n\t\tNetwork communications\t<\/h2>\n\t\t\t\t\t<div class=\"block-title-and-content__content\">\n\t\t\t\t\n<p\t\tclass=\"typography block-typography__typography typography__color--bodyOnBlack typography__size--regular-body typography__align--left\"\n\t\t\t>\n\t\tMost apps communicate over the internet with a server. Therefore, keeping data secure while being transferred across the internet is important.\u00a0<br><br>At a minimum, your app should use the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Transport_Layer_Security\">Transport Layer Security (TLS)<\/a> protocol to protect the data being sent and received. In many cases this is sufficient. However, there are tools like <a href=\"https:\/\/www.charlesproxy.com\">Charles Proxy<\/a> that allow users to inspect the contents of TLS-encrypted communications on their devices. The <a href=\"https:\/\/en.wikipedia.org\/wiki\/Man-in-the-middle_attack\">man-in-the-middle (MITM)<\/a> approach used by Charles Proxy can also be used by an attacker on an unencrypted Wi-Fi network to intercept and record TLS-encrypted communications.<br><br>To mitigate such attacks, apps can perform validations on the server\u2019s certificate chain to ensure that communications have not been tampered with. This process, known as <a href=\"https:\/\/developer.apple.com\/news\/?id=g9ejcf8y\">certificate pinning<\/a>, will only allow communications with a server if its certificate meets certain criteria. While this mitigates the risk of a MITM attack, your system needs to take into account many new failure modes that this can introduce. Also, the use of certain VPN software (for example, <a href=\"https:\/\/help.zscaler.com\/zia\/certificate-pinning-and-ssl-inspection\">Zscaler<\/a>) can interfere with certificate pinning.<br><br>Sometimes the certificate of a server will be revoked or updated \u2014 if your app is only pinned to the server\u2019s old certificate, this will require an update to allow it to continue to connect to that server.\t<\/p>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\t<div class=\"block-title-and-content__social-links\">\n\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"copy\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Copy page link\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tdata-tooltip=\"true\"\n\t\t\t\t\tdata-tooltip-text=\"Link copied to clipboard.\"\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg' width='22' height='22' viewBox='0 0 22 22'><path d='M6.832 15.167l8.333-8.333M9.332 6.001l2.787-2.787a4.715 4.715 0 016.666 0v0a4.715 4.715 0 010 6.667L16 12.668M5.999 9.334l-2.787 2.787a4.715 4.715 0 000 6.666v0a4.715 4.715 0 006.667 0l2.787-2.786' stroke='currentColor' stroke-width='2'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"facebook\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Facebook\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='14' height='22' viewBox='0 0 14 22' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M4.032 22L4 12H0V8h4V5.5C4 1.789 6.298 0 9.61 0c1.585 0 2.948.118 3.345.17v3.88H10.66c-1.8 0-2.15.856-2.15 2.112V8h5.241l-2 4H8.51v10H4.032z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"whatsapp\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Whatsapp\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg xmlns='http: \/\/www.w3.org\/2000\/svg' width='25' height='24' viewBox='0 0 25 24'><path d='M.805 24l1.687-6.163a11.869 11.869 0 01-1.588-5.945C.907 5.335 6.244 0 12.801 0c3.182.001 6.17 1.24 8.415 3.488a11.819 11.819 0 013.481 8.413c-.002 6.558-5.34 11.893-11.896 11.893h-.005c-1.99-.001-3.947-.5-5.685-1.448L.805 24zm6.598-3.807l.361.214a9.874 9.874 0 005.033 1.378h.004c5.45 0 9.885-4.434 9.888-9.885a9.824 9.824 0 00-2.894-6.993 9.823 9.823 0 00-6.99-2.898c-5.454 0-9.89 4.434-9.892 9.884a9.86 9.86 0 001.512 5.26l.235.374-.999 3.648 3.742-.982z' fill='currentColor'\/><path d='M9.825 6.921c-.24-.58-.486-.501-.668-.51-.174-.009-.372-.01-.57-.01-.198 0-.52.074-.793.371-.272.298-1.04 1.017-1.04 2.48 0 1.462 1.065 2.875 1.214 3.073.148.199 2.096 3.2 5.078 4.487.709.306 1.262.49 1.694.626.712.226 1.36.194 1.872.118.571-.085 1.759-.72 2.007-1.413.247-.694.247-1.29.173-1.413-.074-.124-.272-.199-.57-.347-.297-.149-1.758-.868-2.03-.967-.273-.1-.471-.149-.67.149-.198.297-.767.966-.94 1.165-.174.198-.348.223-.645.074-.297-.149-1.255-.462-2.39-1.475-.884-.788-1.48-1.76-1.654-2.058-.173-.298-.018-.459.13-.607.134-.133.298-.347.446-.52.149-.174.199-.298.298-.496.099-.198.05-.372-.025-.52-.074-.15-.669-1.612-.917-2.207z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F&#038;text=Mobile%20app%20security%20best%20practices%20for%20product%20managers\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"twitter\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Twitter\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='25' height='20' viewBox='0 0 25 20' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M24.75 2.3c-.9.4-1.8.7-2.8.8 1-.6 1.8-1.6 2.2-2.7-1 .6-2 1-3.1 1.2-.9-1-2.2-1.6-3.6-1.6-2.7 0-4.9 2.2-4.9 4.9 0 .4 0 .8.1 1.1-4.2-.2-7.8-2.2-10.2-5.2-.5.8-.7 1.6-.7 2.5 0 1.7.9 3.2 2.2 4.1-.8 0-1.6-.2-2.2-.6v.1c0 2.4 1.7 4.4 3.9 4.8-.4.1-.8.2-1.3.2-.3 0-.6 0-.9-.1.6 2 2.4 3.4 4.6 3.4-1.7 1.3-3.8 2.1-6.1 2.1-.4 0-.8 0-1.2-.1 2.2 1.4 4.8 2.2 7.5 2.2 9.1 0 14-7.5 14-14v-.6c1-.7 1.8-1.6 2.5-2.5z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"linkedin\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Linkedin\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='19' height='18' viewBox='0 0 19 18' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M1.15 17.3h3.6V5.8h-3.6v11.5zM.75 2.1c0 1.2 1 2.1 2.1 2.1 1.2 0 2.1-.9 2.1-2.1 0-1.2-1-2.1-2.1-2.1-1.2 0-2.1 1-2.1 2.1zM14.45 17.3h3.6v-6.2c0-3.1-.7-5.5-4.3-5.5-1.8 0-2.9.9-3.4 1.8V5.8h-3.4v11.5h3.6v-5.7c0-1.5.2-2.9 2.1-2.9 1.8 0 1.8 1.7 1.8 3v5.6z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t<\/div>\n<\/div>\n\n<div class=\"block-title-and-content js-block-title-and-content block-title-and-content__theme--white\">\n\t<div class=\"block-title-and-content__layout\">\n\t\t<h2\t\tclass=\"typography block-title-and-content__title typography__color--onyxGrey typography__size--h2 typography__align--left\"\n\t\tdata-size-mobile=\"h2\" \t>\n\t\tScreen privacy on mobile apps\u00a0\t<\/h2>\n\t\t\t\t\t<div class=\"block-title-and-content__content\">\n\t\t\t\t\n<p\t\tclass=\"typography block-typography__typography typography__color--onyxGrey typography__size--regular-body typography__align--left\"\n\t\t\t>\n\t\tScreen privacy is an often-overlooked area of app security. iOS takes a screenshot of your app when it moves to the background and shows that screenshot when using the multitasking app switcher.<br><br>If your app shows sensitive information on the screen (e.g., a bank account balance), you should <a href=\"https:\/\/developer.apple.com\/documentation\/uikit\/app_and_environment\/scenes\/preparing_your_ui_to_run_in_the_background#3222195\">obscure the contents of your window when entering the background<\/a>. Otherwise, that sensitive information will be stored as an image in the operating system and will be visible any time the user is switching between apps.\t<\/p>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\t<div class=\"block-title-and-content__social-links\">\n\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"copy\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Copy page link\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tdata-tooltip=\"true\"\n\t\t\t\t\tdata-tooltip-text=\"Link copied to clipboard.\"\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg' width='22' height='22' viewBox='0 0 22 22'><path d='M6.832 15.167l8.333-8.333M9.332 6.001l2.787-2.787a4.715 4.715 0 016.666 0v0a4.715 4.715 0 010 6.667L16 12.668M5.999 9.334l-2.787 2.787a4.715 4.715 0 000 6.666v0a4.715 4.715 0 006.667 0l2.787-2.786' stroke='currentColor' stroke-width='2'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"facebook\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Facebook\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='14' height='22' viewBox='0 0 14 22' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M4.032 22L4 12H0V8h4V5.5C4 1.789 6.298 0 9.61 0c1.585 0 2.948.118 3.345.17v3.88H10.66c-1.8 0-2.15.856-2.15 2.112V8h5.241l-2 4H8.51v10H4.032z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"whatsapp\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Whatsapp\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg xmlns='http: \/\/www.w3.org\/2000\/svg' width='25' height='24' viewBox='0 0 25 24'><path d='M.805 24l1.687-6.163a11.869 11.869 0 01-1.588-5.945C.907 5.335 6.244 0 12.801 0c3.182.001 6.17 1.24 8.415 3.488a11.819 11.819 0 013.481 8.413c-.002 6.558-5.34 11.893-11.896 11.893h-.005c-1.99-.001-3.947-.5-5.685-1.448L.805 24zm6.598-3.807l.361.214a9.874 9.874 0 005.033 1.378h.004c5.45 0 9.885-4.434 9.888-9.885a9.824 9.824 0 00-2.894-6.993 9.823 9.823 0 00-6.99-2.898c-5.454 0-9.89 4.434-9.892 9.884a9.86 9.86 0 001.512 5.26l.235.374-.999 3.648 3.742-.982z' fill='currentColor'\/><path d='M9.825 6.921c-.24-.58-.486-.501-.668-.51-.174-.009-.372-.01-.57-.01-.198 0-.52.074-.793.371-.272.298-1.04 1.017-1.04 2.48 0 1.462 1.065 2.875 1.214 3.073.148.199 2.096 3.2 5.078 4.487.709.306 1.262.49 1.694.626.712.226 1.36.194 1.872.118.571-.085 1.759-.72 2.007-1.413.247-.694.247-1.29.173-1.413-.074-.124-.272-.199-.57-.347-.297-.149-1.758-.868-2.03-.967-.273-.1-.471-.149-.67.149-.198.297-.767.966-.94 1.165-.174.198-.348.223-.645.074-.297-.149-1.255-.462-2.39-1.475-.884-.788-1.48-1.76-1.654-2.058-.173-.298-.018-.459.13-.607.134-.133.298-.347.446-.52.149-.174.199-.298.298-.496.099-.198.05-.372-.025-.52-.074-.15-.669-1.612-.917-2.207z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F&#038;text=Mobile%20app%20security%20best%20practices%20for%20product%20managers\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"twitter\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Twitter\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='25' height='20' viewBox='0 0 25 20' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M24.75 2.3c-.9.4-1.8.7-2.8.8 1-.6 1.8-1.6 2.2-2.7-1 .6-2 1-3.1 1.2-.9-1-2.2-1.6-3.6-1.6-2.7 0-4.9 2.2-4.9 4.9 0 .4 0 .8.1 1.1-4.2-.2-7.8-2.2-10.2-5.2-.5.8-.7 1.6-.7 2.5 0 1.7.9 3.2 2.2 4.1-.8 0-1.6-.2-2.2-.6v.1c0 2.4 1.7 4.4 3.9 4.8-.4.1-.8.2-1.3.2-.3 0-.6 0-.9-.1.6 2 2.4 3.4 4.6 3.4-1.7 1.3-3.8 2.1-6.1 2.1-.4 0-.8 0-1.2-.1 2.2 1.4 4.8 2.2 7.5 2.2 9.1 0 14-7.5 14-14v-.6c1-.7 1.8-1.6 2.5-2.5z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"linkedin\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Linkedin\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='19' height='18' viewBox='0 0 19 18' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M1.15 17.3h3.6V5.8h-3.6v11.5zM.75 2.1c0 1.2 1 2.1 2.1 2.1 1.2 0 2.1-.9 2.1-2.1 0-1.2-1-2.1-2.1-2.1-1.2 0-2.1 1-2.1 2.1zM14.45 17.3h3.6v-6.2c0-3.1-.7-5.5-4.3-5.5-1.8 0-2.9.9-3.4 1.8V5.8h-3.4v11.5h3.6v-5.7c0-1.5.2-2.9 2.1-2.9 1.8 0 1.8 1.7 1.8 3v5.6z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t<\/div>\n<\/div>\n\n<div class=\"block-highlighted-item-listing\">\n\t<h2\t\tclass=\"typography block-highlighted-item-listing__title typography__color--onyxGrey typography__size--regular-body typography__align--left\"\n\t\t\t>\n\t\tMore Insights?\t<\/h2><a\tclass=\"cta-button block-highlighted-item-listing__cta-button cta-button__color--onyxGrey cta-button__style--regular\" href=\"https:\/\/www.dept.global\/en-us\/all-insights\/\" >\n\t\n\t\t\t<span>\n\t\t\tView all Insights\t\t<\/span>\n\t\n<\/a>\n\t<div class=\"block-highlighted-item-listing__cards\">\n\t\t<a\tclass=\"universal-item-card universal-item-card__type--article universal-item-card--has-link-decoration\"\n\tdata-theme=\"white\"\n\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/healthdirect-is-bringing-trusted-clinically-grounded-health-guidance-to-chatgpt-designed-and-built-by-dept\/\"\n\t\t\t\ttitle=\"Healthdirect is bringing trusted, clinically grounded health guidance to ChatGPT, designed and built by DEPT\u00ae.\"\n\t\t>\n\t\t\t<div class=\"universal-item-card__backplate universal-item-card__backplate--with-image\"><\/div>\n\t\n\t<div\n\t\tclass=\"image-wrap universal-item-card__image-wrap\"\n\t\tdata-align=\"center center\"\n\t\t\t>\n\n\t\t\t<picture\n\t\tclass=\"image__picture\"\n\t\t\t\t>\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t<img\n\t\t\t\tsrc=\"https:\/\/www.dept.global\/wp-content\/uploads\/2026\/07\/Chatgpt-Assistance-Healthcare-AU-1920x1080-1.png\"\n\t\t\t\tclass=\"image universal-item-card__image\"\n\n\t\t\t\t\t\t\t\talt=\"Healthdirect is bringing trusted, clinically grounded health guidance to ChatGPT, designed and built by DEPT\u00ae.\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tloading=\"lazy\"\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\/>\n\t\t<\/picture>\n\t\n\t<\/div><p\t\tclass=\"typography universal-item-card__meta typography__color--darkGrey typography__size--eyebrow-lc typography__align--left\"\n\t\t\t>\n\t\tAI TRANSFORMATION&emsp;\u2022&emsp;Evan Davey\t<\/p><h3\t\tclass=\"typography universal-item-card__title typography__color--onyxGrey typography__size--h6 typography__align--left\"\n\t\t\t>\n\t\t<span>Healthdirect is bringing trusted, clinically grounded health guidance to ChatGPT, designed and built by DEPT\u00ae.<\/span>\t<\/h3><button\tclass=\"cta-button universal-item-card__btn cta-button__color--onyxGrey cta-button__style--regular has-parent-hover\" >\n\t\n\t\t\t<span>\n\t\t\tRead Article\t\t<\/span>\n\t\n<\/button>\n\t\n\t<\/a><a\tclass=\"universal-item-card universal-item-card__type--article universal-item-card--has-link-decoration\"\n\tdata-theme=\"white\"\n\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/dept-returns-with-the-secret-garden-and-opens-souvenir-shop-with-capsule-collection-at-cannes-lions-2026\/\"\n\t\t\t\ttitle=\"DEPT\u00ae returns with The Secret Garden and opens Souvenir Shop with capsule collection at Cannes Lions 2026\"\n\t\t>\n\t\t\t<div class=\"universal-item-card__backplate universal-item-card__backplate--with-image\"><\/div>\n\t\n\t<div\n\t\tclass=\"image-wrap universal-item-card__image-wrap\"\n\t\tdata-align=\"center center\"\n\t\t\t>\n\n\t\t\t<picture\n\t\tclass=\"image__picture\"\n\t\t\t\t>\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t<img\n\t\t\t\tsrc=\"https:\/\/www.dept.global\/wp-content\/uploads\/2026\/05\/Souvenir-Shop-PR-1920x1080-insight-1.png\"\n\t\t\t\tclass=\"image universal-item-card__image\"\n\n\t\t\t\t\t\t\t\talt=\"DEPT\u00ae returns with The Secret Garden and opens Souvenir Shop with capsule collection at Cannes Lions 2026\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tloading=\"lazy\"\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\/>\n\t\t<\/picture>\n\t\n\t<\/div><p\t\tclass=\"typography universal-item-card__meta typography__color--darkGrey typography__size--eyebrow-lc typography__align--left\"\n\t\t\t>\n\t\tBRAND &AMP; MEDIA&emsp;\u2022&emsp;In\u00eas Saraiva\t<\/p><h3\t\tclass=\"typography universal-item-card__title typography__color--onyxGrey typography__size--h6 typography__align--left\"\n\t\t\t>\n\t\t<span>DEPT\u00ae returns with The Secret Garden and opens Souvenir Shop with capsule collection at Cannes Lions 2026<\/span>\t<\/h3><button\tclass=\"cta-button universal-item-card__btn cta-button__color--onyxGrey cta-button__style--regular has-parent-hover\" >\n\t\n\t\t\t<span>\n\t\t\tRead Article\t\t<\/span>\n\t\n<\/button>\n\t\n\t<\/a><a\tclass=\"universal-item-card universal-item-card__type--article universal-item-card--has-link-decoration\"\n\tdata-theme=\"white\"\n\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/dept-launches-accelerator-powered-by-adobe-genstudio-for-performance-marketing-to-bridge-ais-execution-gap\/\"\n\t\t\t\ttitle=\"DEPT\u00ae launches accelerator powered by Adobe GenStudio for Performance Marketing to bridge AI\u2019s execution gap\"\n\t\t>\n\t\t\t<div class=\"universal-item-card__backplate universal-item-card__backplate--with-image\"><\/div>\n\t\n\t<div\n\t\tclass=\"image-wrap universal-item-card__image-wrap\"\n\t\tdata-align=\"center center\"\n\t\t\t>\n\n\t\t\t<picture\n\t\tclass=\"image__picture\"\n\t\t\t\t>\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t<img\n\t\t\t\tsrc=\"https:\/\/www.dept.global\/wp-content\/uploads\/2026\/04\/DEPTxAdobe-Accelerator_1080x1080-1.png\"\n\t\t\t\tclass=\"image universal-item-card__image\"\n\n\t\t\t\t\t\t\t\talt=\"DEPT\u00ae launches accelerator powered by Adobe GenStudio for Performance Marketing to bridge AI\u2019s execution gap\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tloading=\"lazy\"\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\/>\n\t\t<\/picture>\n\t\n\t<\/div><p\t\tclass=\"typography universal-item-card__meta typography__color--darkGrey typography__size--eyebrow-lc typography__align--left\"\n\t\t\t>\n\t\tBRAND &AMP; MEDIA&emsp;\u2022&emsp;In\u00eas Saraiva\t<\/p><h3\t\tclass=\"typography universal-item-card__title typography__color--onyxGrey typography__size--h6 typography__align--left\"\n\t\t\t>\n\t\t<span>DEPT\u00ae launches accelerator powered by Adobe GenStudio for Performance Marketing to bridge AI\u2019s execution gap<\/span>\t<\/h3><button\tclass=\"cta-button universal-item-card__btn cta-button__color--onyxGrey cta-button__style--regular has-parent-hover\" >\n\t\n\t\t\t<span>\n\t\t\tRead Article\t\t<\/span>\n\t\n<\/button>\n\t\n\t<\/a>\t<\/div>\n<\/div>\n\n<div class=\"block-title-and-content js-block-title-and-content block-title-and-content__theme--onyxGrey\">\n\t<div class=\"block-title-and-content__layout\">\n\t\t\n\t\t\t\t\t<div class=\"block-title-and-content__content\">\n\t\t\t\t\n<h2\t\tclass=\"typography block-typography__typography typography__color--bodyOnBlack typography__size--h6 typography__align--left\"\n\t\t\t>\n\t\tThe easiest (and most cost-effective) way to practice good app security hygiene is to do it early and proactively.\u00a0\t<\/h2>\n\n<p\t\tclass=\"typography block-typography__typography typography__color--bodyOnBlack typography__size--regular-body typography__align--left\"\n\t\t\t>\n\t\tGet your team thinking about security best practices from the very beginning of the project. For instance, try using <a href=\"https:\/\/www.softwaresecured.com\/stride-threat-modeling\/\">STRIDE modeling<\/a> to help identify any potential vulnerabilities in your app\u2019s ecosystem. You should do this before any UI has been drawn up or any code has been written to help inform your team\u2019s design choices.\u00a0\t<\/p>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\t<div class=\"block-title-and-content__social-links\">\n\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"copy\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Copy page link\"\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tdata-tooltip=\"true\"\n\t\t\t\t\tdata-tooltip-text=\"Link copied to clipboard.\"\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg' width='22' height='22' viewBox='0 0 22 22'><path d='M6.832 15.167l8.333-8.333M9.332 6.001l2.787-2.787a4.715 4.715 0 016.666 0v0a4.715 4.715 0 010 6.667L16 12.668M5.999 9.334l-2.787 2.787a4.715 4.715 0 000 6.666v0a4.715 4.715 0 006.667 0l2.787-2.786' stroke='currentColor' stroke-width='2'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"facebook\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Facebook\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='14' height='22' viewBox='0 0 14 22' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M4.032 22L4 12H0V8h4V5.5C4 1.789 6.298 0 9.61 0c1.585 0 2.948.118 3.345.17v3.88H10.66c-1.8 0-2.15.856-2.15 2.112V8h5.241l-2 4H8.51v10H4.032z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"whatsapp\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Whatsapp\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg xmlns='http: \/\/www.w3.org\/2000\/svg' width='25' height='24' viewBox='0 0 25 24'><path d='M.805 24l1.687-6.163a11.869 11.869 0 01-1.588-5.945C.907 5.335 6.244 0 12.801 0c3.182.001 6.17 1.24 8.415 3.488a11.819 11.819 0 013.481 8.413c-.002 6.558-5.34 11.893-11.896 11.893h-.005c-1.99-.001-3.947-.5-5.685-1.448L.805 24zm6.598-3.807l.361.214a9.874 9.874 0 005.033 1.378h.004c5.45 0 9.885-4.434 9.888-9.885a9.824 9.824 0 00-2.894-6.993 9.823 9.823 0 00-6.99-2.898c-5.454 0-9.89 4.434-9.892 9.884a9.86 9.86 0 001.512 5.26l.235.374-.999 3.648 3.742-.982z' fill='currentColor'\/><path d='M9.825 6.921c-.24-.58-.486-.501-.668-.51-.174-.009-.372-.01-.57-.01-.198 0-.52.074-.793.371-.272.298-1.04 1.017-1.04 2.48 0 1.462 1.065 2.875 1.214 3.073.148.199 2.096 3.2 5.078 4.487.709.306 1.262.49 1.694.626.712.226 1.36.194 1.872.118.571-.085 1.759-.72 2.007-1.413.247-.694.247-1.29.173-1.413-.074-.124-.272-.199-.57-.347-.297-.149-1.758-.868-2.03-.967-.273-.1-.471-.149-.67.149-.198.297-.767.966-.94 1.165-.174.198-.348.223-.645.074-.297-.149-1.255-.462-2.39-1.475-.884-.788-1.48-1.76-1.654-2.058-.173-.298-.018-.459.13-.607.134-.133.298-.347.446-.52.149-.174.199-.298.298-.496.099-.198.05-.372-.025-.52-.074-.15-.669-1.612-.917-2.207z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F&#038;text=Mobile%20app%20security%20best%20practices%20for%20product%20managers\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"twitter\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Twitter\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='25' height='20' viewBox='0 0 25 20' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M24.75 2.3c-.9.4-1.8.7-2.8.8 1-.6 1.8-1.6 2.2-2.7-1 .6-2 1-3.1 1.2-.9-1-2.2-1.6-3.6-1.6-2.7 0-4.9 2.2-4.9 4.9 0 .4 0 .8.1 1.1-4.2-.2-7.8-2.2-10.2-5.2-.5.8-.7 1.6-.7 2.5 0 1.7.9 3.2 2.2 4.1-.8 0-1.6-.2-2.2-.6v.1c0 2.4 1.7 4.4 3.9 4.8-.4.1-.8.2-1.3.2-.3 0-.6 0-.9-.1.6 2 2.4 3.4 4.6 3.4-1.7 1.3-3.8 2.1-6.1 2.1-.4 0-.8 0-1.2-.1 2.2 1.4 4.8 2.2 7.5 2.2 9.1 0 14-7.5 14-14v-.6c1-.7 1.8-1.6 2.5-2.5z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t\t\t<a\n\t\t\t\thref=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Fwww.dept.global%2Fen-au%2Finsight%2Fmobile-app-security-best-practices-for-product-managers%2F\"\n\t\t\t\tdata-share-url=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\"\n\t\t\t\tdata-share-title=\"Mobile app security best practices for product managers\"\n\t\t\t\tdata-share-type=\"linkedin\"\n\t\t\t\tclass=\"block-title-and-content__social-links-item js-social-link\"\n\t\t\t\taria-label=\"Share to Linkedin\"\n\t\t\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\trel=\"noopener noreferrer\"\n\t\t\t\t\n\t\t\t\t\t\t\t>\n\t\t\t\t<svg width='19' height='18' viewBox='0 0 19 18' fill='none' xmlns='http: \/\/www.w3.org\/2000\/svg'><path d='M1.15 17.3h3.6V5.8h-3.6v11.5zM.75 2.1c0 1.2 1 2.1 2.1 2.1 1.2 0 2.1-.9 2.1-2.1 0-1.2-1-2.1-2.1-2.1-1.2 0-2.1 1-2.1 2.1zM14.45 17.3h3.6v-6.2c0-3.1-.7-5.5-4.3-5.5-1.8 0-2.9.9-3.4 1.8V5.8h-3.4v11.5h3.6v-5.7c0-1.5.2-2.9 2.1-2.9 1.8 0 1.8 1.7 1.8 3v5.6z' fill='currentColor'\/><\/svg>\t\t\t<\/a>\n\t\t\t\t<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":40,"featured_media":4269194,"template":"","meta":{"_acf_changed":false,"es_utils_meta_schema":"","dept_alt_featured_image":[],"dept_algolia_noindex":false,"dept_algolia_featured":false,"member_job_title":"","member_linkedin_url":"","footnotes":""},"insight-topics":[42718],"person":[39771],"class_list":["post-4269193","article","type-article","status-publish","has-post-thumbnail","hentry"],"acf":{"dept_is_3q_page":false,"dept_insight_featured":true,"dept_current_cpt_partner":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Mobile app security best practices for product managers - DEPT\u00ae<\/title>\n<meta name=\"description\" content=\"Get your team thinking about mobile app security best practices from the very beginning of the project. Here are best practices.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mobile app security best practices for product managers - DEPT\u00ae\" \/>\n<meta property=\"og:description\" content=\"Get your team thinking about mobile app security best practices from the very beginning of the project. Here are best practices.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/\" \/>\n<meta property=\"og:site_name\" content=\"DEPT\u00ae\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-08T11:39:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security-1024x683.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/\"},\"author\":{\"name\":\"Alexandra Moorhouse\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#\\\/schema\\\/person\\\/57d70812ce2b4e6d6b8cd6afd8963ce1\"},\"headline\":\"Mobile app security best practices for product managers\",\"datePublished\":\"2022-11-07T18:26:22+00:00\",\"dateModified\":\"2025-12-08T11:39:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/\"},\"wordCount\":8,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dept.global\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/mobile-app-security.jpg\",\"articleSection\":[\"Uncategorized @en-apac\"],\"inLanguage\":\"global-GLOBAL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/\",\"url\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/\",\"name\":\"Mobile app security best practices for product managers - DEPT\u00ae\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dept.global\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/mobile-app-security.jpg\",\"datePublished\":\"2022-11-07T18:26:22+00:00\",\"dateModified\":\"2025-12-08T11:39:13+00:00\",\"description\":\"Get your team thinking about mobile app security best practices from the very beginning of the project. Here are best practices.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/#breadcrumb\"},\"inLanguage\":\"global-GLOBAL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"global-GLOBAL\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.dept.global\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/mobile-app-security.jpg\",\"contentUrl\":\"https:\\\/\\\/www.dept.global\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/mobile-app-security.jpg\",\"width\":2200,\"height\":1468},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/insight\\\/mobile-app-security-best-practices-for-product-managers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mobile app security best practices for product managers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#website\",\"url\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/\",\"name\":\"DEPT\u00ae\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#organization\"},\"alternateName\":\"DEPT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"global-GLOBAL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#organization\",\"name\":\"DEPT\u00ae\",\"alternateName\":\"DEPT\",\"url\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"global-GLOBAL\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.dept.global\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/logo-dept.svg\",\"contentUrl\":\"https:\\\/\\\/www.dept.global\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/logo-dept.svg\",\"width\":1,\"height\":1,\"caption\":\"DEPT\u00ae\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.tiktok.com\\\/@deptagency\",\"https:\\\/\\\/www.instagram.com\\\/deptagency\\\/?hl=en\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/deptagency\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dept.global\\\/en-au\\\/#\\\/schema\\\/person\\\/57d70812ce2b4e6d6b8cd6afd8963ce1\",\"name\":\"Alexandra Moorhouse\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"global-GLOBAL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e8ce4f04a43020c00db84d54b1c54ed8dba8b0de0b959126c45106f23e6ecb9a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e8ce4f04a43020c00db84d54b1c54ed8dba8b0de0b959126c45106f23e6ecb9a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e8ce4f04a43020c00db84d54b1c54ed8dba8b0de0b959126c45106f23e6ecb9a?s=96&d=mm&r=g\",\"caption\":\"Alexandra Moorhouse\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mobile app security best practices for product managers - DEPT\u00ae","description":"Get your team thinking about mobile app security best practices from the very beginning of the project. Here are best practices.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/","og_locale":"en_US","og_type":"article","og_title":"Mobile app security best practices for product managers - DEPT\u00ae","og_description":"Get your team thinking about mobile app security best practices from the very beginning of the project. Here are best practices.","og_url":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/","og_site_name":"DEPT\u00ae","article_modified_time":"2025-12-08T11:39:13+00:00","og_image":[{"url":"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security-1024x683.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/#article","isPartOf":{"@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/"},"author":{"name":"Alexandra Moorhouse","@id":"https:\/\/www.dept.global\/en-au\/#\/schema\/person\/57d70812ce2b4e6d6b8cd6afd8963ce1"},"headline":"Mobile app security best practices for product managers","datePublished":"2022-11-07T18:26:22+00:00","dateModified":"2025-12-08T11:39:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/"},"wordCount":8,"publisher":{"@id":"https:\/\/www.dept.global\/en-au\/#organization"},"image":{"@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security.jpg","articleSection":["Uncategorized @en-apac"],"inLanguage":"global-GLOBAL"},{"@type":"WebPage","@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/","url":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/","name":"Mobile app security best practices for product managers - DEPT\u00ae","isPartOf":{"@id":"https:\/\/www.dept.global\/en-au\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/#primaryimage"},"image":{"@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security.jpg","datePublished":"2022-11-07T18:26:22+00:00","dateModified":"2025-12-08T11:39:13+00:00","description":"Get your team thinking about mobile app security best practices from the very beginning of the project. Here are best practices.","breadcrumb":{"@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/#breadcrumb"},"inLanguage":"global-GLOBAL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/"]}]},{"@type":"ImageObject","inLanguage":"global-GLOBAL","@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/#primaryimage","url":"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security.jpg","contentUrl":"https:\/\/www.dept.global\/wp-content\/uploads\/2022\/11\/mobile-app-security.jpg","width":2200,"height":1468},{"@type":"BreadcrumbList","@id":"https:\/\/www.dept.global\/en-au\/insight\/mobile-app-security-best-practices-for-product-managers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dept.global\/en-au\/"},{"@type":"ListItem","position":2,"name":"Mobile app security best practices for product managers"}]},{"@type":"WebSite","@id":"https:\/\/www.dept.global\/en-au\/#website","url":"https:\/\/www.dept.global\/en-au\/","name":"DEPT\u00ae","description":"","publisher":{"@id":"https:\/\/www.dept.global\/en-au\/#organization"},"alternateName":"DEPT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dept.global\/en-au\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"global-GLOBAL"},{"@type":"Organization","@id":"https:\/\/www.dept.global\/en-au\/#organization","name":"DEPT\u00ae","alternateName":"DEPT","url":"https:\/\/www.dept.global\/en-au\/","logo":{"@type":"ImageObject","inLanguage":"global-GLOBAL","@id":"https:\/\/www.dept.global\/en-au\/#\/schema\/logo\/image\/","url":"https:\/\/www.dept.global\/wp-content\/uploads\/2025\/10\/logo-dept.svg","contentUrl":"https:\/\/www.dept.global\/wp-content\/uploads\/2025\/10\/logo-dept.svg","width":1,"height":1,"caption":"DEPT\u00ae"},"image":{"@id":"https:\/\/www.dept.global\/en-au\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.tiktok.com\/@deptagency","https:\/\/www.instagram.com\/deptagency\/?hl=en","https:\/\/www.linkedin.com\/company\/deptagency"]},{"@type":"Person","@id":"https:\/\/www.dept.global\/en-au\/#\/schema\/person\/57d70812ce2b4e6d6b8cd6afd8963ce1","name":"Alexandra Moorhouse","image":{"@type":"ImageObject","inLanguage":"global-GLOBAL","@id":"https:\/\/secure.gravatar.com\/avatar\/e8ce4f04a43020c00db84d54b1c54ed8dba8b0de0b959126c45106f23e6ecb9a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e8ce4f04a43020c00db84d54b1c54ed8dba8b0de0b959126c45106f23e6ecb9a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e8ce4f04a43020c00db84d54b1c54ed8dba8b0de0b959126c45106f23e6ecb9a?s=96&d=mm&r=g","caption":"Alexandra Moorhouse"}}]}},"_links":{"self":[{"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/insight\/4269193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/insight"}],"about":[{"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/types\/article"}],"author":[{"embeddable":true,"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/users\/40"}],"version-history":[{"count":1,"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/insight\/4269193\/revisions"}],"predecessor-version":[{"id":4373702,"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/insight\/4269193\/revisions\/4373702"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/media\/4269194"}],"wp:attachment":[{"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/media?parent=4269193"}],"wp:term":[{"taxonomy":"insight-topic","embeddable":true,"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/insight-topics?post=4269193"},{"taxonomy":"person","embeddable":true,"href":"https:\/\/www.dept.global\/en-au\/wp-json\/wp\/v2\/person?post=4269193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}