Android Native - Where to put secret, endpoints, keys?

Question

AFAIK there are 2 possibilities:

1. local.properties

.
├── app
│   ├── build.gradle
│   └── src
├── build.gradle
├── gradle
├── gradlew
├── gradlew.bat
├── settings.gradle
└── local.properties

with

Properties properties = new Properties()
properties.load(project.rootProject.file('local.properties').newDataInputStream())
def sdkDir = properties.getProperty('sdk.dir')
def ndkDir = properties.getProperty('ndk.dir')

2. src > build.gradle > defaultConfig || other configs

defaultConfig {
    ...
    buildConfigField "String", "API_KEY", "\"${System.env.API_KEY}\""
}

println(BuildConfig.API_KEY)

What method should I use?

Actual secrets should never go into an app since you can unzip or decompile an apk and read all of them. A phone is not a trusted environment like a server — zapl, Sep 27 '22 at 13:49

score 0 · Answer 1 · answered Sep 27 '22 at 13:38

0

This is the Good Answer for your Question- Link

answered Sep 27 '22 at 13:38

Sandesh Khutal

1,712
1
4
17

This is not a good answer though. https://meta.stackexchange.com/q/8231 – zapl Sep 27 '22 at 14:02

Android Native - Where to put secret, endpoints, keys?

1. local.properties

2. src > build.gradle > defaultConfig || other configs

1 Answers1