Is there any way to protect my json connection password, when i use it in my android app?

Question

I have an android app. I'm using json api to fetch data from database. But api credentials are stored in my app. I don't want it. Because there are some ways to show android source codes.

Are there any way fetch data securely but credentials are not stored in my app?

Answer 1

You can use Android Keystore.The Keystore is not used directly for storing application secrets such as password, however, it provides a secure container, which can be used by apps to store their private keys, in a way that's pretty difficult for malicious (unauthorised) users and apps to retrieve.

How to use the Android Keystore to store passwords and other sensitive information

Where is the best place to store a password in your Android app