When a Keychain item can be read is part of iOS app protection. Background work on a locked device may need different conditions from an interactive secret.
Evaluation approach
Match accessibility to actual use. Assess device-bound storage and portability separately.
Application example
Separate a background-sync token from a document key requiring user approval. Verify both on a locked device.
Limits and considerations
The broadest accessibility may simplify integration while leaving unnecessary access windows.
Justifying background access
State which task needs an item while the device is locked. Do not apply broad access to every record for convenience. Test restart, first unlock and return from background separately.
Checks and decisions
- Document use timing
- Test locked devices
- Assess portability
Sources
The primary references above provide the technical basis. Example workflows and evaluation suggestions are this publication’s explanations, not independent test results for a particular product.