Definition

Hardware Enclave

A physically isolated memory region built into modern CPUs (implemented as TPM chips, Apple Secure Enclave, Android Strongbox, etc.) that cannot be accessed by the operating system, applications, or external software. Keys and secrets stored in a hardware enclave can be used to sign operations but cannot be read out - even a compromised OS cannot extract them. Every modern laptop, phone, and most connected devices ship with a hardware enclave; CPU manufacturers added them primarily for mobile payments (tap-to-pay) and secure boot. Beyond Identity uses hardware enclaves to store device-bound credentials for authentication. For AI builders: any agent credential or API token not stored in an enclave is theoretically extractable by malware, a compromised dependency, or a developer machine breach.