Hi, I need to store user login info for a Web 2.0 service in my iPhone app. I wonder what's the safe and secure way to do it. I send login info encoded as specified in the service api, but what about the strings stored on the device? Do I need to adhere to some standard, keychain or other type of encryption to safely store username and password of the user? Are there any rules to follow also for the distribution on the App Store? I read in another place that you should declare what type of encryption you use in the app for export purposes... Who could clarify this question please? Or point me in the right direction? Thanks a lot.