How to prevent http packet capture in Android?

Question

In our android app using rest api. when i try to capture request and response via pocket capture android app it is showing what is request and response. i want to prevent http capture for request and response.

Answer 1

Disable HTTP without TLS on your server, use certificate pinning on the client. The attacker will only be able to see requests (by reverse engineering or modifying the application). There is no way to be 100% secure in this case. If the user has network access he will be able to see the data. HTTPS and certificate pinning will be reasonable big obstacle for most attackers.