Hello, according to the documentation, the min sdk for this is 4.3 (18)

As for being hacked, it is very very hard. On some devices, the keystore location is a physical location in the devices hardware which can only be accessed by the process that does the encryption.