Search code examples
androidgoogle-playandroid-security

Google Play warning: Your App may be leaking developer credentials

Please, explain me, what is it?

I have received a message from GP, with this text:

Hello Google Play Developer,

We detected that your app(s) listed at the end of this email are potentially leaking credentials used to make network requests (HTTP and FTP).

Please check for cases where you use url-encoded basic access authentication, for example a URL such as https://username:[email protected]/. We recommend that you immediately change the credentials and redesign your app to avoid including them.

Next steps

Sign in to your Developer Console and submit the updated version of your app.
Check back after five hours - we’ll show a warning message if the app hasn’t been updated correctly.

Exposed developer credentials can allow an attacker to compromise your systems which puts user data at risk. For other technical questions about the vulnerability, you can post to Stack Overflow and use the tag “android-security.”

We’re here to help

If you feel we have sent this warning in error, you can contact our developer support team.

Regards,

The Google Play Team

I don't understand what a problem with my app, please help me. What should I change in my app?

Solution

  • Andy, Pablo and others wonderful people, who have visited this topic.

    The problem was solved recently.

    All you need to do - just update Appodeal SDK to the last one (ver. 1.14.15).

    You can find it in our docs

    Also you can download Android SDK here (Native Android).

    Regards, Andrew

    Appodeal Support Team.