Search code examples
androidencryptionflutterdartandroid-security

How to reduce the possibility/completely prevent the possibility of reverse engineering a flutter app?


I recently read a couple of blogs and realized that apart from obsufication there is no proper way by which we can prevent the reverse engineering of a Flutter app.

Is there any manual or proper way to ensure that atleast the encryption logic of storing certain encrypted values in Sharedpreferences remains untraceable or impossible to decode/know?

It would be great if there could be some way to make the entire logic of the app untraceable.


Solution

  • I would recommend having the logic behind the app residing on a back-end server then push the results into the client app.

    I have my application doing the calculations on cloud functions with a database trigger then push the result into the database where i have the client listening for the changes. Even my payments processing is done from the server.