Secure your apps with App Attest

A Podkey summary of Secure your apps with App Attest, from WWDC 2026.A lot of this comes down to one simple idea: if your server can tell it’s talking to a real app on real Apple hardware, a whole category of fraud gets much harder. The new App Attest details in iOS 27 and macOS 27 add more context around where an app launched from, which binary version is actually running, and whether repeated requests still look trustworthy over time. And the practical part matters just as much as the cryptography: key handling, replay protection, rate limits, and knowing when a weird signal is actually fraud versus somebody just reinstalling an app.Why App Attest mattersNew signals in iOS 27 and macOS 27Keys that behave like keys shouldReplay protection and the assertion counterFraud metrics and unsupported responsesOperational guardrailsThis podcast was created with Podkey. Make your own at https://podkey.fm