device-integrity

You can verify iOS app integrity and device legitimacy by integrating Apple DeviceCheck for per-device bit flags and App Attest for cryptographic attestations via the Secure Enclave. This validates that requests originate from genuine Apple hardware running your legitimate app instance.

Apple DeviceCheck provides simple per-device bits for tracking flags like claimed promotional offers, while App Attest uses Secure Enclave cryptographic keys to validate app legitimacy. DeviceCheck targets iOS 11+ and App Attest targets iOS 14+ for comprehensive fraud prevention.

You need App Attest to protect sensitive API endpoints when you must cryptographically validate that requests come from your uncompromised app instance. It leverages Secure Enclave keys on iOS 14+ devices to prevent unauthorized clients from accessing your backend services.

Yes, Apple DeviceCheck works with iOS 11 and later to query per-device bits for detecting compromised devices or tracking simple states. For deeper app integrity validation via cryptographic attestations, iOS 14+ is required to utilize App Attest functionality.

The best way to implement device verification on an iOS backend is to combine DeviceCheck queries for simple per-device flags with App Attest validation for cryptographic proof of app legitimacy. This dual approach ensures robust fraud prevention and endpoint protection against compromised requests.