You Asked, We Answered

Security today is a huge concern and has been since the technological shift from Y2K. There is often a false sense of security when it comes to mobile and web applications. They can be hacked. So what can you do to prevent your apps from being hacked? Whether it’s your own product that you’ve created you’re concerned about or an application on your phone there are measures you can take that will make your applications more secure.

Applications on Your Phone

1. Be mindful of your surroundings

When using your phone in public there are most likely people within your close proximity. Think airport, on a train, on a bus, or any other setting where you might have someone close to you. Your phone’s screen can be seen. If the screen can be seen then what you are typing and the application that you are using can be seen as well. Ever thought about why some banking apps allow you to hide your credentials and account balances? Because the sheer fact that they can be viewed may put you at risk (especially if you’re fortunate enough to have a lot of zeroes!). Just be aware of your surroundings and keep your phone away from prying eyes.

2. Password Security

It goes without saying that password is not a password. While they may be difficult to remember, using a password similar to the secure passwords that Google generates are probably the most secure types of passwords out there. Even two-factor authentication these days is questionable. Many apps require some form of email sign-in. As a user when you put your email credentials into an app, how can you be sure that the application developer/owner isn’t able to view those? It actually is a pretty big concern. We recommend using apps that are reputable as far as having a good track record of users and reviews. If you question it, don’t your info out there. Going with your gut can save you a lot of heartaches.

3. When it’s out of your hands

Application developers are supposed to put in certain securities that can keep hackers out (we’ll discuss this more below). When apps are not secure in the backend you as the user may have no idea. You might have the most secure password in the world that no one knows except for you. If the backend of the app is not secure and you enter your information it could become compromised at no fault of your own.

Product Security For Your Own App

How can a product owner know if the app is secure?

Pentesting is a shorter term for penetration testing. This is a test to find vulnerabilities in your applications or network. Developers will create simulated attacks on the app to expose where the cracks are in security. If the app doesn’t keep the intruders out in the test (considered a fail), the developers can then view what information by the “user” was accessed and potentially stolen.

Without doing these vulnerability tests, no one can use an application with confidence that their information is safe. The app stores do an excellent job of vetting application developers but to say the process is perfect would be inaccurate. There will always be someone trying to hack software which means they believe that there is a way in.

If you want to learn more about application security consider chatting with one of our developers today!

Drop us a line at (208) 344-1115