The need for security in mobile apps has never been greater. Most developers are aware of the need to encrypt sensitive data at rest and in transit; but how do you protect the cryptographic keys that unlock the data? This presentation will examine the solutions available - from hardware-backed options like the Android Keystore to pure software ones like Whitebox Cryptography. It will look at the pros and cons of the different solutions and highlight the use cases each is best suited to with real world examples.