Upcoming Security Enhancement: Masking of Secure iparams in App Configuration

Effective from FDK v9.5.0, all secure installation parameters (secure iparams) will be masked in the app configuration page once they are saved. This change enhances security by ensuring sensitive data is no longer exposed in the UI or network calls post-installation.

Deadline :calendar:

By 31st December 2025, all new apps and existing apps must be built or upgraded using FDK v9.5.0 or above to comply with this update.

What this means for you

  • Secure iparams will no longer be visible in plain text after saving.
  • You must access secure iparams only through the Request Method using the iparam template.
  • Apps relying on secure iparams in plaintext on the installation page will no longer function correctly and must be updated.

Required action :memo:

  • Update your FDK to v9.5.0 or later.
  • Refactor your app code to retrieve secure iparams using the Request Method.
  • From now on, only apps built with FDK v9.5.0+ will be allowed for new submissions or version upgrades.

For help upgrading your app, refer to the FDK documentation or reach out in the developer community.

Hi @Raviraj,

Nice to have this security update!

So, within six months we have to update the fdk version of all the existing apps?
Will this affect the existing application that runs on older versions?

So if we secure the API key we, we won’t be able to view it yet we can update it when we save the iparams?

Thank you.