Password security when sending email from android

Question

There is no problems with sending emails from android through this technology. But there is one thing: the security of a password. I assume that we can somehow encrypt the password inside the application to make the reverse engineering harder, but what is the best way? How to ensure the security of the mail box?

Answer 1

Gmail servers support OAuth authentication for SMTP and IMAP, so you should be able to authenticate with a token, without having the actual password: https://developers.google.com/google-apps/gmail/oauth_overview

If you are trying to send email as someone other than the app user, you'll have to obfuscate the password embedded in the app. Another idea is to use some sort of HTTP email gateway, where you authenticate the user using their Google account, but send mail using your own service account.