Android Enterprise Security 🛡️
Hardening Android apps against reverse engineering and runtime modifications.
⚡ When to Use
- When requested to implement banking-grade security, obfuscation, or tamper-detection.
🏗️ Core Rules / Pillars
1. ProGuard / R8 Rules
- Pattern: Always explicitly keep domains, GSON/Moshi models, and JNI bridges. Use
-keepattributes *Annotation*.
2. Root & Tamper Detection
- Pattern: Use Google Play Integrity API instead of hand-written root-checking scripts that look for
subinaries.
🚧 Critical Anti-Hallucination Guards
- Trap: Do NOT use outdated SafetyNet APIs. SafetyNet is deprecated. Use Play Integrity API.