Skip to main content

Getting Started with Approov

This path is a simple first journey through Approov. It is designed to help you build a working mental model, integrate one app and API, monitor the result, and then decide when you are ready to enforce blocking.

Use this as the guided route. The deeper sections of the docs remain available as reference material when you need more detail.

The Path at a Glance​

  1. Understand the Approov flow: learn what the app, Approov cloud, and backend each do.
  2. Install the CLI tool: get the Approov CLI tool set up on your machine.
  3. Integrate the app: add Approov to your mobile app using a quickstart or the direct SDK.
  4. Add API domains: tell Approov which API domains should receive Approov tokens.
  5. Add app signing certificates: allow Approov to recognize official app builds.
  6. Integrate the backend: verify Approov tokens or use secure strings, depending on your architecture.
  7. Test and monitor: use metrics and example tokens to confirm the integration is working.
  8. Go live: move from observation to production blocking safely.

What You Need Before Starting​

You should have:

  • An Approov account or trial account.
  • Access to the Approov Onboarding email for CLI initialization.
  • A mobile app build you can test.
  • At least one API domain that the app calls.
  • Backend access if you plan to validate Approov tokens server-side.

How to Use This Section​

Start with the next page and move through the steps in order. Each page explains the goal, the minimum action needed, and where to go for the detailed reference docs.

If you are still evaluating Approov, keep the first pass narrow: one app, one API domain, and monitoring mode before blocking.