cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
antonandreev
Advocate I
Advocate I

PowerApps code protection on device

Hi,

 

I plan to create an app which will has some calculation algorithm and maybe some hidden strings which I don't want users to see.

 

Lets imagine some user already has the app shared with him on the device. And this user wants to hack the app and see its sources, or decompile it, or whatever.

 

The question is, hypothetically, how easy (or hard) it will be for the intruder to see the app source on the device and to get these my strings and calculation algorithms? Is there any kind of App-level encryption or some obfuscation for the compiled PowerApps app on the device?

 

(can't find anything related on internet)

1 ACCEPTED SOLUTION

Accepted Solutions

Hi @v-xida-msft ,

 

Yep, that's pretty clear, the "Users" permissions and resources encryption, thanks. But I more wonder about how the compiled app is stored on the device.

 

Btw I just realized the app still remains accessible from the browser, so all the files are there and its not a problem to get your hands on them. I've looked on my compiled code and it seem not very readable for me, so there still a lot of reverse engineering will be required to hack my scenario (can't fully share it, sorry).

 

From that I learned the general recommendation is never to store any keys/certificates in the app resources. But if you want to have some privacy-sensitive code inside the app PowerApps will be near-the-same level secure as Native apps because everything still have to be decompiled/reverse engineered.

View solution in original post

2 REPLIES 2
v-xida-msft
Community Support
Community Support

Hi @antonandreev ,

Could you please share a bit more about your scenario?

Do you want to encrypt the app resources within PowerApps Mobile App Mobile device?

 

If you want to encrypt the app resources within PowerApps Mobile App Mobile device, I afraid that there is no way to achieve your needs in PowerApps currently.

 

App-Level encryption is not supported within PowerApps currently, if you would like this feature to be added in PowerApps, please consider submit an idea to PowerApps Ideas Forum:

https://powerusers.microsoft.com/t5/Power-Apps-Ideas/idb-p/PowerAppsIdeas

 

Actually, when you share an app to your end users with "Users" permission, they could only run your app rather than edit your app. These end users with "Users" permission to your canvas app could not review/see the formulas/codes typed within your app. They also could not access the formulas/codes through decompiling it.

Note: PowerApps App has its own Security Access Permission. More deetails about sharing app in PowerApps, please check the following article:

https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/share-app

 

Best regards,

Community Support Team _ Kris Dai
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Hi @v-xida-msft ,

 

Yep, that's pretty clear, the "Users" permissions and resources encryption, thanks. But I more wonder about how the compiled app is stored on the device.

 

Btw I just realized the app still remains accessible from the browser, so all the files are there and its not a problem to get your hands on them. I've looked on my compiled code and it seem not very readable for me, so there still a lot of reverse engineering will be required to hack my scenario (can't fully share it, sorry).

 

From that I learned the general recommendation is never to store any keys/certificates in the app resources. But if you want to have some privacy-sensitive code inside the app PowerApps will be near-the-same level secure as Native apps because everything still have to be decompiled/reverse engineered.

View solution in original post

Helpful resources

Announcements
PA_User Group Leader_768x460.jpg

Manage your user group events

Check out the News & Announcements to learn more.

Power Query PA Forum 768x460.png

Check it out!

Did you know that you can visit the Power Query Forum in Power BI and now Power Apps

Carousel 2021 Release Wave 2 Plan 768x460.jpg

2021 Release Wave 2 Plan

Power Platform release plan for the 2021 release wave 2 describes all new features releasing from October 2021 through March 2022.

PowerPlatform 768x460.png

Microsoft Learn

Check out our new Discover Your Career Path blog post series and get all the details.

Users online (1,621)