2.0.0

2.0.0 (2026-08-21)

Encrypted token storage

Lokksmith now encrypts its persisted state at rest — access and refresh tokens, nonces and in-flight auth-flow state are encrypted before they are written to disk (or localStorage on the Web). This is on by default and needs no configuration.

State written by earlier versions as plaintext is migrated automatically on first access: no manual step, and users stay signed in.

Encryption can be turned off if you prefer to manage it yourself:

val lokksmith = createLokksmith(
    options = Lokksmith.Options(encryptionEnabled = false),
)

Note that existing encrypted state cannot be read in plaintext mode and is treated as absent, so users will have to authenticate again.

See Encryption for details, including the reduced guarantee on the Web and how to exclude Lokksmith's files from Android backups.

Huge thanks to @SimonJackler for implementing this feature! 🎉

⚠ BREAKING CHANGES

• Android: minimum SDK raised to 23 (Android 6.0). Wrapping the encryption key with the
  Android Keystore requires API 23. This should not be a problem in practice — most modern
  AndroidX and Jetpack libraries already require the same minimum SDK.
• Lokksmith.Options gained the encryptionEnabled parameter in second position. Callers
  using named arguments are unaffected.

Features

• encrypt persisted snapshots at rest (#488) (9fb46bd)

Bug Fixes

• deps: update agp to v9.3.1 (#470) (b547557)
• deps: update androidx.lifecycle to v2.11.0 (#466) (309707d)
• deps: update dependency androidx.appcompat:appcompat to v1.8.0 (#491) (c0a1d56)
• deps: update dependency androidx.constraintlayout:constraintlayout to v2.2.2 (#481) (1c182fa)
• deps: update dependency org.jetbrains.androidx.lifecycle:lifecycle-runtime-compose to v2.11.0 (#467) (f33d26b)
• deps: update dependency org.jetbrains.androidx.lifecycle:lifecycle-viewmodel-compose to v2.11.0 (#469) (aeaddc1)
• deps: update kotlin monorepo to v2.4.10 (#468) (9eebf66)
• deps: update ktor monorepo to v3.5.2 (#483) (638840a)
• deps: update spotless to v8.10.0 (#493) (2aaf014)
• deps: update spotless to v8.8.0 (#461) (b9f6c2d)
• deps: update spotless to v8.9.0 (#479) (9eff018)