Reference detail
MASVS-CRYPTO-2 — The app performs key management according to best practices.
MASVS-CRYPTO covers whether the app uses strong, current cryptography and manages its keys correctly.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (3)
Private key material
Never ship private-key material in a client. Revoke/rotate the compromised key and hold it server-side or in a hardware-backed store.
Browse this categoryExpired signing certificate
Renew the signing certificate; ensure validity extends well beyond the app's expected lifetime.
Browse this categoryBIP-39 wallet seed phrase
A mnemonic seed phrase must never be embedded — any holder controls the wallet. Move funds to a new wallet immediately and never bundle key material.
Browse this categoryApps with mapped findings
427 matching apps · Counts below include only this page’s mapped finding types.
Turbo Fax: send fax from phone
com.piksoft.turbofaxBuild 1.0.13 · 2026-09-02 11:07 UTC1 matching category · 3 matching occurrences
Leakydemo
com.example.leakydemoBuild 1.0.0 · 2026-08-30 08:07 UTC1 matching category · 1 matching occurrence