Answers · App attestation

Should backends trust mobile app attestation for device commands?

Andrej Albrecht By Andrej Albrecht Published August 2026 2 min read

← All answers

Direct answer

Mobile app attestation helps backends reject scripted API abuse, but it does not replace device-side authorization for physical actions. Combine it with login, rate limits, and command checks on the device. For example, a garage-door command should still require the controller to validate session rights before actuating.

Published August 2026 · Last technically reviewed August 2026

Answer BLE Key Rotation Timing Answer Firmware Signature Checks Answer What connected-product development means Service Connected product development

Need a second opinion on architecture?

We help connected product teams across BLE, Android, backend, and cloud before expensive rework starts.

Book a call Launch Readiness Score