Skip to content

Free Tool from Approov to Secure Your First Line of Defense Against Man-in-the-Middle (MitM) Attacks

 Free static pinning generator from Approov 
 Instantly create the required public key pins from your server certificates
 No complex tooling or openssl commands needed
 Just paste your domain name to get your public key hash
 Embed this into your app for static pinning

Ideal for Android (Network Security Config), iOS (NSURLSessionDelegate), or hybrid apps using networking libraries.

 

Now You Have Tried the Tool, it's time to upgrade to Dynamic, Cloud-Verified Channel Integrity 

Static Pinning is a solid step up from HTTPS. Dynamic Pinning takes protection even further.

Feature

Protects against MitM attacks
Prevents unauthorized server connections
Enforces known certificates
Manages certificate rotation
Resists pin extraction from app
Supports centralized control
Enables emergency pin updates
Minimizes developer workload
Ensures service continuity
HTTPS (Good)
⚠️ Limited – relies on CA trust
⚠️ Vulnerable to redirection
❌ No – trusts any valid CA cert
⚠️ Manual cert updates needed
❌ Not applicable
❌ No
❌ No
⚠️ Medium – manual cert checks
⚠️ At risk during cert changes
Static Pinning (Better)

✅ Yes – blocks untrusted connections

✅ Yes – cert validation prevents redirection

✅ Yes – pins trusted certs in app

⚠️ App update required

⚠️ Pins can be found in code

⚠️ Not built-in

⚠️ Slow – requires app store review

⚠️ High – manual pin management

⚠️ At risk during cert changes

Dynamic Pinning (Best)

✅➕ Yes – with real-time app integrity checks

✅➕ Yes – adds runtime attestation
✅➕ Yes – pins securely delivered and updated live

✅➕ Seamless OTA updates, no release delays

✅➕ Pins never stored in app
✅➕ Full control via dashboard or CLI
✅➕ Instantly deployable to users
✅➕ Low – automatic pin updates
✅➕ Failover pins maintain uptime