Why should secret API keys not be stored inside the APK?

  1. Google Play rejects all strings
  2. Keys slow down the app
  3. APKs cannot hold strings
  4. APKs can be decompiled and the keys extracted
Answer

D) APKs can be decompiled and the keys extracted

Secrets in the client are not secure; keep them on the server.

Computer Science MCQ · More Web Services: Accessing and Creating MCQs · Practise