Skip to content
Vol. 1 · Ed. 2026
CyberGlossary
Français
Entry № 062

Apple App Attest

Qu'est-ce que Apple App Attest ?

Apple App AttestApple's iOS / iPadOS / tvOS / watchOS attestation service that lets an app prove to its backend that it is the genuine, App-Store-signed binary running on a real Apple device with Secure Enclave protection.

App Attest is Apple's device-and-app attestation framework, generally available from iOS 14 (2020), with parallel support on iPadOS, tvOS, watchOS and macOS Catalyst. An app calls `DCAppAttestService` to generate a P-256 key pair inside the device's Secure Enclave, then asks Apple to attest the public key — producing a certificate chain that, when verified by the app's backend, proves that the key lives in genuine Apple Secure Enclave hardware on a non-jailbroken device, was created by the app's App-Store-signed bundle, and is bound to Apple's root CA. On every sensitive backend call, the app builds a small client assertion signed with the attested key and sends it alongside the request; the server verifies the assertion is fresh and matches the previously stored attested public key. App Attest is the iOS counterpart to Google's Play Integrity API and is used by banking, fintech, anti-fraud, and mobile-DRM apps. Limitations include simulator-only usage being restricted, and attestation freshness assumptions that backends must enforce. Combined with DeviceCheck, App Attest is the current best-practice way to bind iOS app trust to hardware.

● Exemples

  1. 01

    A mobile bank's iOS app provisions an App Attest key at install time and signs every backend call with a derived assertion; the server rejects assertions whose attestation cert chain doesn't lead to Apple's root.

  2. 02

    An anti-fraud platform issues a custom challenge nonce that the iOS client must include in its App Attest assertion to defeat replay.

● Questions fréquentes

Qu'est-ce que Apple App Attest ?

Apple's iOS / iPadOS / tvOS / watchOS attestation service that lets an app prove to its backend that it is the genuine, App-Store-signed binary running on a real Apple device with Secure Enclave protection. Cette notion relève de la catégorie Sécurité mobile en cybersécurité.

Que signifie Apple App Attest ?

Apple's iOS / iPadOS / tvOS / watchOS attestation service that lets an app prove to its backend that it is the genuine, App-Store-signed binary running on a real Apple device with Secure Enclave protection.

Comment fonctionne Apple App Attest ?

App Attest is Apple's device-and-app attestation framework, generally available from iOS 14 (2020), with parallel support on iPadOS, tvOS, watchOS and macOS Catalyst. An app calls `DCAppAttestService` to generate a P-256 key pair inside the device's Secure Enclave, then asks Apple to attest the public key — producing a certificate chain that, when verified by the app's backend, proves that the key lives in genuine Apple Secure Enclave hardware on a non-jailbroken device, was created by the app's App-Store-signed bundle, and is bound to Apple's root CA. On every sensitive backend call, the app builds a small client assertion signed with the attested key and sends it alongside the request; the server verifies the assertion is fresh and matches the previously stored attested public key. App Attest is the iOS counterpart to Google's Play Integrity API and is used by banking, fintech, anti-fraud, and mobile-DRM apps. Limitations include simulator-only usage being restricted, and attestation freshness assumptions that backends must enforce. Combined with DeviceCheck, App Attest is the current best-practice way to bind iOS app trust to hardware.

Comment se défendre contre Apple App Attest ?

Les défenses contre Apple App Attest combinent habituellement des contrôles techniques et des pratiques opérationnelles, comme détaillé dans la définition ci-dessus.

Quels sont les autres noms de Apple App Attest ?

Noms alternatifs courants : App Attest, DCAppAttestService.

● Termes liés