[amantellix]

Hello, in your knowledge, what would be a secure way to store a password inside an android app?
Presume that this app must perform a decryption, and that has to do it offline, it means that the private key must be stored inside the app somewhere right?
How could this kind of storage possibly work, considering that the apk can be reverse engeneered to see the code?

thank you
Antony

[Frost Crypt]

i'm no android developer but i'm pretty sure that that android let's you use the security of it's own encryption key and tie your security somehow to it, you have to research it.
Take a look at signal's source, i'm sure they use that to secure their messages .

[amantellix]

i'm no android developer but i'm pretty sure that that android let's you use the security of it's own encryption key and tie your security somehow to it, you have to research it.
Take a look at signal's source, i'm sure they use that to secure their messages .

Thank you for the hint, I looked quickly at signal's code but is way different to the code of this app i am trying to understand, all the libraries are different.
I will try to look deeper anyway.
Are there any andorid expert who can have any suggestion?