yes sure definitely so yeah security is actually a major thing in your Android application development I lots of challenges I have faced while implementing the applications as I yeah so I told you when that I work on that technical applications and that SSL pinning was expired on that last two days of before production so that time we get some issue as well so that challenge I had except in my organization I resolved that and I provided solution within two days we were unable to get that what is the solution but I found out that with the certificate because it is happening with that iOS application that time but also I am an Android developer native I worked on so I resolved that and yeah we got the application on that as well another thing there are the some challenges on the data security so if you storing the data locally so we have to follow some approaches like we don't store directly because it will be data will be go to the outside and someone will use for misuse for the data as well so we use the encrypted shared preferences for that most of all if you sure ensuring storing the data or encrypted file we can use another if we have some stores we can use the key store for that so we follow some regularity for that another authentication we can use so whenever we do the API calls before that we can do the authentication then only we do the API call like JWT or OAuth we can use for that authentication another way with the SSL pinning so whenever we do the API call so before that our API get handshake with the server our application get handshake with the server with that certificate of that SSL pinning and it is get successful then only it will be able to do the SSL pinning another thing if user want to share some data so with the API if so that we can also encrypt it because I use that in suppose we have scanner into the application we scan that the data so we get some data so we suppose if you want to provide to another fragment one fragment one fragment so we can do that encrypted otherwise md5 we can convert it and we can pass on another fragment and we can decrypt that that is also required we followed some principles of that security OASP whatever the provided by that okay and yeah so these are the another thing majorly thing we use the Proguard in that our application applications because when anyone want to decompile the application it won't be to won't be get all the files only required files it will be get show so that is the best also security protecting components suppose we have a broadcast receiver we are doing okay using and we have suppose services are services are running anyone can won't be use that services until we until it we provide some security for that whenever anyone it want to be do that new service so that we use and check and we give some security code it is visible then only we can use that service that also we can provide to that yeah and majorly thing is the data encryption as I told you earlier so we have any certificates of that so we can use any AES 504 any certificate we can use that and we can yeah thank you
