okay so as per the Android security context we consider so most of the time the Android app the majors means yeah so main major thing is we have some security things to be applied whenever we are developing that application most of the time we don't should we keep the data in the most of the time the application if you want to keep the data make sure it will be encrypted format so like I use some somewhere safe preferences always I make sure it will be the encrypt the data and it will store so whenever we hitting the data that time decrypting the data so that approach I have follow the another is the data protection so suppose wherever we data will send you data we store transfer from that HTTPS so that should be also sometimes we require that converted encrypted server team sometimes get any encrypted also do the authentication so like JWT or 2.0 so it will be good for because we get the token that token we pass from every API so it will be it will be great to achieve the security because of that token token authorization is most important currently another biometric authentication so it is good so if you use because currently I am in my last two applications so I am use that so because whenever I have user want to enter in that application and if you allow biometric authentication it will be easy to use for the user as well and easily yeah so easily user can login with that one tap of that thumb yeah another is the code security so proguard we can use so with the proguard which if suppose anyone want to the decompile the APK so it won't be possible to record it will be kept because proguard it have the feature so we can reduce their whatever the files you want to avoid or that we can put yeah so another is SSL pinning in that network we can say because in that most of the time man in middle it is happening that time it will be attack most of the time happen so that major problem we have to resolve we use the SSL pinning so what we do in that we keep one certificate pinning and implementation we do that and using that we can prevent so we keep that one certificate whenever network call goes to the server that certificate will pass with that handshaking will be done if that handshaking will get success then only response will be get so that way that way we SSL pinning we can handling another we also do the on yeah another one also we do wherever the work has been done with any object make sure to do release that object from that process so it will be get optimization as well and it won't data leak others other so it is also get another part way we can do the security these most of the features I have followed in my current project as well and previous project as well and yeah and another in the testing and monitoring for that also we can do the another approaches that way also we can do that yeah
