{ "$schema": "https://raw.githubusercontent.com/guitaripod/wwdc-sessions/master/schema/session.schema.json", "schemaVersion": 1, "id": "wwdc2026-201", "event": "wwdc2026", "eventName": "WWDC26", "year": 2026, "eventContentId": 201, "title": "Secure your apps with App Attest", "description": "Harness App Attest to protect your app from unauthorized modification and fraud. Uncover how attackers exploit modified apps to spoof data and bypass security checks, and how App Attest defends against these threats. Learn to generate and manage App Attest keys bound to the Secure Enclave, validate attestations and assertions, and use the fraud metric to detect abuse. Discover best practices across all Apple platforms, including new signals in iOS 27 to strengthen your validation.", "url": "https://developer.apple.com/videos/play/wwdc2026/201", "sosumiURL": "https://sosumi.ai/videos/play/wwdc2026/201", "type": "Video", "publishedAt": "2026-06-08T14:00:00-07:00", "platforms": [ "iOS", "iPadOS", "macOS", "tvOS", "visionOS", "watchOS" ], "keywords": [ "🎈", "fraud", "mitigate" ], "topics": [ "App Services", "App Store, Distribution & Marketing", "Business & Education", "Privacy & Security" ], "primaryTopic": "Privacy & Security", "duration": 1202, "hasTranscript": true, "transcriptWordCount": 2960, "availableLanguages": [ "eng", "fra", "jpn", "kor", "por", "spa", "zho" ], "media": { "hls": "https://devstreaming-cdn.apple.com/videos/wwdc/2026/201/4/d3eb2e5b-5104-4aee-a754-9985008a5b06/cmaf.m3u8", "downloadHLS": "https://devstreaming-cdn.apple.com/videos/wwdc/2026/201/4/d3eb2e5b-5104-4aee-a754-9985008a5b06/cmaf-download.m3u8", "downloadSD": "https://devstreaming-cdn.apple.com/videos/wwdc/2026/201/4/d3eb2e5b-5104-4aee-a754-9985008a5b06/downloads/wwdc2026-201_sd.mp4", "downloadHD": "https://devstreaming-cdn.apple.com/videos/wwdc/2026/201/4/d3eb2e5b-5104-4aee-a754-9985008a5b06/downloads/wwdc2026-201_hd.mp4", "duration": 1202 }, "codeSnippets": [ { "title": "Generate a Secure Enclave–bound key", "language": "swift", "startTimeSeconds": 307, "code": "import DeviceCheck\n\nlet keyID = try await DCAppAttestService.shared.generateKey()" }, { "title": "Attestation API", "language": "swift", "startTimeSeconds": 392, "code": "import DeviceCheck\n\nlet keyId: String = ...\nlet clientDataHash: Data = ...\nlet attestation = try await DCAppAttestService.shared.attestKey(keyId: keyId, clientDataHash: clientDataHash)" }, { "title": "Assertion API", "language": "swift", "startTimeSeconds": 753, "code": "import DeviceCheck\n\nlet keyId: String = ...\nlet clientDataHash: Data = ...\nlet assertion = try await DCAppAttestService.shared.generateAssertion(keyId: String, clientDataHash: Data)" } ], "resources": [ { "title": "W3C Authenticator Data", "url": "https://www.w3.org/TR/webauthn-3/#sctn-authenticator-data", "type": "documentation", "description": null }, { "title": "About System Integrity Protection on your Mac", "url": "https://support.apple.com/en-us/102149", "type": "documentation", "description": "System Integrity Protection is a security technology that helps protect your Mac from malicious software." }, { "title": "DeviceCheck", "url": "https://developer.apple.com/documentation/DeviceCheck", "type": "documentation", "description": "Reduce fraudulent use of your services by managing device state and asserting app", "sosumiURL": "https://sosumi.ai/documentation/DeviceCheck", "doccJSON": "https://developer.apple.com/tutorials/data/documentation/DeviceCheck.json" } ], "path": "sessions/wwdc2026/201-secure-your-apps-with-app-attest/", "files": { "metadata": "sessions/wwdc2026/201-secure-your-apps-with-app-attest/metadata.json", "readme": "sessions/wwdc2026/201-secure-your-apps-with-app-attest/README.md", "transcript": "sessions/wwdc2026/201-secure-your-apps-with-app-attest/transcript.md", "transcriptJSON": "sessions/wwdc2026/201-secure-your-apps-with-app-attest/transcript.json" } }