React Native: What are the best practices for React Native app security?

Security best practices — protect app and data.

Data storage:

• Use Keychain (iOS) / KeyStore (Android) for sensitive data.
• Never store secrets in AsyncStorage/MMKV.
• Use encrypted storage.

Network security:

• Always use HTTPS.
• Implement certificate pinning.
• Use secure headers.

Code security:

• Obfuscate code (ProGuard/R8).
• Remove console.log in production.
• Use environment variables for secrets.

Authentication:

• Use biometrics (Face ID, fingerprint).
• Implement secure token storage.
• Use refresh tokens.

Common vulnerabilities:

• Hardcoded API keys.
• Insecure data storage.
• Missing certificate validation.
• Insufficient input validation.