Prevention of reverse engineering ionic use

Question

Is there a way to prevent the reverse engineering of an ionic mobile app? As mentioned in the Android forum, I activated proguard and built the application in eclipse. A file called proguard was created in my bin folder. It contained something like this

view AndroidManifest.xml #generated:6 -keep class com.fg.lolc.CordovaApp { <init>(...); } 

But I could still reverse engineer the application, and I was able to get the code from my APK. Is there a way to prevent this and improve the security of the ionic application? Thanks.

Answer 1

No, this is impossible to prevent. You can code your JavaScript to make it a little harder to get the code, but there are always ways to undo it. A website is not a safe place for source code; it is open to everyone.

Here is a good post on the various ways to “encrypt” your source code to make it more difficult to read.

http://www.justbeck.com/three-ways-to-encrypt-phonegap-and-cordova-mobile-applications/

Related How to avoid reverse engineering an APK file?

Answer 2

 if you want secure your ionic app from reverse engineering and fully secured source code i recommended two steps. First use Enable ProGuard into cordova/ionic project 1. To implement this, open /platforms/android/project.properties and uncomment one line by removing the "#" at left: #proguard.config=${sdk.dir}/tools/proguard/proguard-android.txt:proguard- project.txt 2.copy proguard-custom.txt from ( https://github.com/greybax/cordova-plugin- proguard/blob/master/proguard-custom.txt ) to $android/assets/www/proguard-custom.txt Remove '#' #-keepclassmembers class android.webkit.WebView { # public *; # } 3. add snippet from to build.gradle Find buildTypes by ctrl + F and add like this buildTypes { debug { minifyEnabled true useProguard false proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro' } release { minifyEnabled true proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro' } } Second use cordova-plugin-crypt-file obfuscate or encrypt your code like build/main.js 1)Install cordova plugin add cordova-plugin-crypt-file 2)plugins/cordova-plugin-crypt-file/plugin.xml //Using Refrence of cordova-plugin-crypt <cryptfiles> <include> <file regex="\.(htm|html|js|css)$" /> </include> <exclude> <file regex="exclude_file\.js$" /> </exclude> </cryptfiles> Final step ionic cordova build android --release Now extreact your apk or try APK decompiler (http://www.javadecompilers.com/apk)