--- schema_version: "1" id: 82459b657ac4eb0344add4ac285d8beb560ee795a8dd543aa27d244fa242102e title: Set Up Enhanced Mobile App Security for Mobile Publisher collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/branded_apps_exp_enhanced_mobile_security_setup.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_exp_enhanced_mobile_security_setup.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 2be0382e9d08c293199e5ef8b88de752a05c836266f37d2f36a5d723b50d9b39 description: Enable Enhanced Mobile App Security in Setup for Mobile Publisher, configure security policies in Mobile Security, and assign the Enhanced Mobile App Security configuration to app users. products: - Experiences - Mobile App - Cross Cloud release: "264" --- # Set Up Enhanced Mobile App Security for Mobile Publisher Enable Enhanced Mobile App Security in Setup for Mobile Publisher, configure security policies in Mobile Security, and assign the Enhanced Mobile App Security configuration to app users. ### Required Editions
User Permissions Needed
To create and modify a Mobile Publisher project: Manage mySalesforce Apps
To create and modify Enhanced Mobile App Security settings:

Manage Enhanced Mobile App Security

AND

Modify Metadata
![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_important.png) Important Almost all Mobile Publisher apps were moved to the External Client App framework in the Summer '25 release. If your app is one of a few still using Connected Apps, [refer to the help documentation](https://help.salesforce.com/s/articleView?id=xcloud.connected_app_overview.htm&type=5&language=en_US) for any customizations you need to make. Before you enable Enhanced Mobile App Security for an Android app, download an app signing key certificate from the Google Play Console. You upload this certificate in a later step. In the Google Play Console, select **Protected with Play** in the left menu. In the **Play Store Protection** section, select the down arrow, then select Manage Play app signing. Under App Signing Key, click **Download certificate**, and confirm the file is in the .der format. 1. Enable Enhanced Mobile App Security in Setup for Mobile Publisher. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png) Note When you enable Enhanced Mobile App Security, you also enable code obfuscation for an Android app and string obfuscation for an iOS app. Code or string obfuscation protects your app from reverse engineering. You don’t need to activate a separate policy in Mobile Security to enable code or string obfuscation. 1. From Setup, in the Quick Find box, enter Mobile Publisher, and then select **Mobile Publisher**. 2. Open your app’s project, and then scroll to the Security section. 3. Select **Enhanced Mobile App Security**. 4. For Android apps, upload the app signing key certificate in the .der file format that you downloaded from the Google Play Console. 5. In the Security Alert Settings section, optionally enter the colors and upload the font files for your app's security alerts. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png) Note The security alert text isn't customizable. 6. If your app is available on Android and iOS, enable **Enhanced Mobile App Security** and configure the optional Security Alert Settings in both the Android project and iOS project. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png) Note Your changes are autosaved in your Mobile Publisher project. Proceed to the next steps without submitting your changes. 2. Configure security policies in Mobile Security. 1. From Setup, in the Quick Find box, enter Mobile Security, and then select **Mobile Security**. 2. Find your app, and then click **Edit Security Policies**. ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_tip.png) Tip The name of the app is the name that you specified in the corresponding Mobile Publisher project. 3. Activate the security policies relevant to your app, and set each policy’s level. You can optionally set the effective date and time for each policy. Some policies have additional configuration fields. See [Enhanced Mobile App Security Policies for Mobile Publisher](https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_exp_enhanced_mobile_security_policies.htm&release=264.0.0&type=5 "Review the security policies and severity levels that are supported on Mobile Publisher for Experience Cloud apps."). 4. Save your changes. 5. If your app is available on Android and iOS, configure the security policies on the Android external client app and iOS external client app. To test the security policies in the Playground app, configure the same security policies on the corresponding Playground Android and iOS external client apps. 3. Assign the Enhanced Mobile App Security configuration to app users through a profile or a permission set. 1. To assign Enhanced Mobile App Security through a profile, from Setup, in the Quick Find box, enter Profiles, and then select **Profiles**. Find the profile that’s associated with your Mobile Publisher for Experience Cloud app users. Edit the profile, and under the Administrative Permissions section, enable **Enforce Enhanced Mobile App Security** and **API Enabled**. Save your changes. ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_tip.png) Tip The Enforce Enhanced Mobile App Security checkbox is visible on a profile’s settings only when the [Enhanced Profile User Interface](https://help.salesforce.com/s/articleView?id=platform.users_profiles_about_enhanced_ui.htm&type=5&language=en_US) is enabled. If you’re not using the Enhanced Profile User Interface, you can find the Enforce Enhanced Mobile App Security checkbox in System Permissions. 2. To assign Enhanced Mobile App Security through a permission set, [create a permission set](https://help.salesforce.com/s/articleView?id=platform.perm_sets_create.htm&type=5&language=en_US) with Mobile Security as the label and Mobile\_Security as the API name. Select **Salesforce** for the license, and click **Save**. Click **System Permissions**, click **Edit**, and enable **Enforce Enhanced Mobile App Security** and **API Enabled**. Save your changes. Then [assign the Mobile Security permission set to your users](https://help.salesforce.com/s/articleView?id=platform.perm_sets_manage_assignments.htm&type=5&language=en_US). 4. Return to your app’s project in Setup for Mobile Publisher, and then click **Submit**. Your Enhanced Mobile App Security configuration takes effect starting with the latest build of your app. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png) Note Enhanced Mobile App Security can’t be implemented on previous app builds. After you initially configure Enhanced Mobile App Security and submit your changes in Setup for Mobile Publisher, you can update your app’s security policies in Mobile Security. Any policy changes in Mobile Security take effect after a user opens your app with a cold launch after quitting the app. If you’ve already requested a new app build from Mobile Publisher after enabling Enhanced Mobile App Security, you don’t need to request a new app build to implement security policy changes in Mobile Security settings. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png) Note If you configured new colors or fonts under Security Alert Settings in Setup for Mobile Publisher, make sure to review and test the new security alert style in the beta version of your app.