The DeviceCheck framework, introduced in iOS 11, is a little-known but powerful tool for making apps and backend services more resilient against unauthorized use. In this talk, we’ll explore the two core services it provides—Device Identification and App Attestation—and how they can help validate the integrity of your app. We’ll compare the approaches, show client and server implementations for iOS and Vapor, and discuss how to make your network communication more secure. While not a silver bullet, DeviceCheck is a valuable alternative or complement to certificate pinning and a versatile addition to the iOS developer’s toolkit.