Skip to content

Upgrading flutter_secure_storage 9 to 10

Breaking9.2.4 → 10.3.4Breaking7Platform8Deprecated5New20Changed27Fixed41Other17

Full comparisonBack to flutter_secure_storage
BreakingUpgrade verdict

7 breaking changes and 7 platform requirement changes.

In plain terms
  • By default the plugin now wipes stored data when it hits an error, because such errors usually cannot be recovered.
  • Android now encrypts keys with a different default algorithm.
  • Android now encrypts stored values with a different default algorithm.
  • The web implementation no longer uses the old JavaScript interop package.
Must act Top 5 of 18 that need code or config changes

Dart SDK requirement changed in 10.0.0-beta.1: >=2.12.0 <4.0.0 → >=3.3.0 <4.0.0.

Flutter requirement changed in 10.0.0-beta.1: >=2.0.0 → >=3.19.0.

What you must change

Breaking7
Makes resetOnError default to true since most errors are unrecoverable key storage problems; can be disabled with resetOnError: false.
resetOnError
10.0.0GitHub ReleaseSummarizedView source
Changes the default key cipher to RSA_ECB_OAEPwithSHA_256andMGF1Padding.
RSA_ECB_OAEPwithSHA_256andMGF1Padding
10.0.0GitHub ReleaseSummarizedView source
Changes the default storage cipher to AES_GCM_NoPadding.
AES_GCM_NoPadding
10.0.0GitHub ReleaseSummarizedView source
Removes the js dependency in favor of js-interop on Web.
js
10.0.0GitHub ReleaseSummarizedView source
Enables encryptedSharedPreferences by default and makes it impossible to disable.
encryptedSharedPreferences
10.0.0-beta.1GitHub ReleaseSummarizedView source
Merges iOS and macOS implementations into the unified flutter_secure_storage_darwin package.
flutter_secure_storage_darwin
10.0.0GitHub ReleaseSummarizedView source
Writes encrypted data to files instead of the Windows credential system.
10.0.0GitHub ReleaseSummarizedView source
Platform7
Raises the minimum Android SDK from 19 to 23.
10.0.0GitHub ReleaseSummarizedView source
Migrates to win32 version 5.5.4 to support Dart 3.4 / Flutter 3.22.0.
win32
10.0.0GitHub ReleaseSummarizedView source
Raises the minimum iOS version from 9 to 12.
10.0.0GitHub ReleaseSummarizedView source
Removes dart:io from the platform interface to support WASM builds of web.
dart:io
10.0.0GitHub ReleaseSummarizedView source
Updates all platforms to support Dart SDK <4.0.0.
10.0.0GitHub ReleaseSummarizedView source
Updates the minimum SDK according to Flutter requirements.
10.0.0-beta.5GitHub ReleaseSummarizedView source
Requires a minimum Dart SDK of 3.3.0 and a minimum Flutter version of 3.19.0.
10.0.0-beta.1GitHub ReleaseSummarizedView source

Deprecations to plan for

Deprecated4
Deprecates KeyCipherAlgorithm.RSA_ECB_PKCS1Padding; existing data migrates to RSA_ECB_OAEPwithSHA_256andMGF1Padding when migrateOnAlgorithmChange is true.
KeyCipherAlgorithm.RSA_ECB_PKCS1PaddingRSA_ECB_OAEPwithSHA_256andMGF1PaddingmigrateOnAlgorithmChange
10.2.0GitHub ReleaseSummarizedView source
Deprecates StorageCipherAlgorithm.AES_CBC_PKCS7Padding; existing data migrates to AES_GCM_NoPadding when migrateOnAlgorithmChange is true.
StorageCipherAlgorithm.AES_CBC_PKCS7PaddingAES_GCM_NoPaddingmigrateOnAlgorithmChange
10.2.0GitHub ReleaseSummarizedView source
Deprecates sharedPreferencesName in favor of storageNamespace, which provides complete isolation.
sharedPreferencesNamestorageNamespace
10.1.0GitHub ReleaseSummarizedView source
Deprecates AndroidOptions().encryptedSharedPreferences due to the Jetpack Crypto package deprecation.
AndroidOptionsencryptedSharedPreferences
10.0.0GitHub ReleaseSummarizedView source