Should data placed in keychain encrypted manually?

Question

Sorry for this yes/no question.

Should we encrypt the password with a separate algorithm while saving in keychain or leave the keychain default cryptography mechanism?

If i have to why?

I am thinking to store username and password inside keychain which is working perfectly.

Answer 1

If you want to Store Username or Email and Password locally then Keychain is the best option. Have a look into KeyChain Documentation.

All the password data in the keychain is protected using the Triple Digital Encryption Standard (3DES).

You can also refer one of the answer here

It is always good practice to provide one more layer of security if you have some confidential data. So its all up to you.

You can encrypt it before inserting into Keychain.

You can use AES and many more encryption technique which is available in iOS.

Download KeyChain Apple Official Sample Code From Here

Answer 2

You don't need to use additional encryption for it. Read more about iOS Security in iOS Security Guide including Keychain working.