strongBoxPreferred

Indicates whether StrongBox hardware security module should be preferred for key storage.

StrongBox is a tamper-resistant hardware security module that provides the highest level of security for cryptographic keys. When enabled, the system will attempt to generate and store keys in StrongBox if available, falling back to standard TEE if not supported.

StrongBox benefits:

  • Hardware-isolated key generation and storage

  • Tamper-resistant and tamper-evident security

  • Side-channel attack resistance

  • Compliance with highest security standards

  • Physical protection against key extraction

Compatibility considerations:

  • Requires Android 9.0+ (API 28)

  • Limited device support (mainly flagship devices)

  • May impact performance for key operations

  • Graceful fallback to TEE when unavailable

Default: false (uses standard TEE for broader compatibility)

See also