Insecure vs Secure: Same App, Two Builds
The same mobile app on Azure, built two different ways.
What you'll learn
- Why the insecure architecture ships first — it genuinely works
- The six moments where the two designs stop behaving the same
- Why the difference only shows up when something goes wrong
Share this passage
Drawing…
Understand it one step at a time
The short runs these in order in about 25 seconds. Here they are written out — pick any step to jump the short straight to it.
Two ways to build it
Top: the app talks straight to the database. Bottom: it never does. Both compile, both demo fine — only one survives an attacker.
Frequently asked questions
- If the insecure design works, why does it matter?
- Because "works" and "survives" are different claims — the insecure design ships first and behaves identically to the secure one right up until the six moments things go wrong: a leaked key, a stolen token, an oversized permission, and so on. The difference is invisible until then.
- What's the real cost of the insecure design?
- Every fix becomes an app store release you don't control the timing of, gated by a reviewer, while the secure design keeps every fix server-side. That gap in response time is what actually separates the two builds.
Free app · no app store
These are built for a phone
Every short is drawn at full portrait height, the shape a phone already is. Installed, it opens full-bleed with no address bar across the top — and the whole library reads offline.
Read deeper on Azure
Twenty seconds gets the shape of an idea across. These go into how it behaves in production.
-
How Azure Protects a Mobile App: The Full Request Flow, Layer by Layer
Front Door, your API, Microsoft Entra ID, authorization and a private database — the five layers that stand between a mobile app and its data on Azure.
-
Your Mobile App Is Leaking Its API Key — and Obfuscation Will Not Save It
An APK or IPA is a zip file. Anything hardcoded inside it, including your API key, is already public — and here is how to get it off the phone for good.
-
What Is Microsoft Foundry (Azure AI Foundry)? The Services, and When You Actually Need Them
A plain tour of Microsoft Foundry for developers: the resource, projects, models, agents, tools, and when Azure OpenAI on its own is enough.
More shorts
-
Azure
Secure a Mobile API in 5 Steps
8 steps · 25s
-
Azure
What Happens When You Tap Sign In
8 steps · 25s
-
Azure
Your Mobile App Is Leaking Its API Key
8 steps · 26s
Get new posts by email
New technical articles, Azure AI and GitHub Copilot updates, and upcoming events. No spam, unsubscribe anytime.
MSDEVBUILD
/ blog Multi-Stack Dev Build · by Suthahar Azure