App storage (filesystem)
Hardware keystore chip
Attacker filesystem probe
⚠ Couldn't load the 3D engineThree.js failed to load from the CDN. Check your connection and reload.
Pick how a mobile app stores a sensitive token locally — as plain text in ordinary app storage, or encrypted through a hardware-backed secure keystore — then simulate an attacker who has gained full filesystem access to the device (a rooted phone, a jailbreak, or a stolen backup) and watch what they can actually recover. Plain-text storage hands over the token immediately; the keystore path leaves them holding only unusable encrypted bytes, because the decryption key itself never leaves the isolated secure hardware.