diff --git a/app/init/credentials.js b/app/init/credentials.js
index 5148a43be..77c73e92d 100644
--- a/app/init/credentials.js
+++ b/app/init/credentials.js
@@ -29,7 +29,11 @@ export const setAppCredentials = (deviceToken, currentUserId, token, url) => {
             EphemeralStore.deviceToken = deviceToken;
             EphemeralStore.currentServerUrl = url;
             AsyncStorage.setItem(CURRENT_SERVER, url);
-            KeyChain.setInternetCredentials(url, username, token, {accessGroup: mattermostManaged.appGroupIdentifier});
+            const options = {
+                accessGroup: mattermostManaged.appGroupIdentifier,
+                securityLevel: 'SECURE_SOFTWARE',
+            };
+            KeyChain.setInternetCredentials(url, username, token, options);
         } catch (e) {
             console.warn('could not set credentials', e); //eslint-disable-line no-console
         }