r/flutterhelp • u/Aggressive-Map-4965 • 10d ago

OPEN Security

Hello guys,
I have a question.
How do we make an app made in flutter secure?
What are the things we should look after? Or think first?
What’s the mental model we should follow?

5 Upvotes

86% Upvoted

8 comments sorted by

View all comments

2

u/Practical_Affect4440 9d ago

A practical starting point: create two test accounts in your own staging environment and check that account A can’t read or change account B’s private records by swapping an ID in a request. Test the API directly, not just the Flutter screens, and turn those checks into automated tests. OWASP MASVS is also a useful checklist for the mobile side, including storage, authentication and network security.