title: Hide API Key in Manifest and in source code android
body: <p>I have a Google MAPS API KEY which can easily be seen when you decompile my app by using reverse engineering. This is not good at all. Also, I am using a Weather API KEY in my source code accessing via string.</p>
  
  <p>I found this website <a href="https://medium.com/@cassioso/a-strategy-to-secure-your-api-keys-using-gradle-b9c107272860" rel="noreferrer">https://medium.com/@cassioso/a-strategy-to-secure-your-api-keys-using-gradle-b9c107272860</a></p>
  
  <p>and wanted to ask you, if this article is recommended or do you have a better idea? </p>
  
  <p>Does anyone have any experience concerning this issue?</p>
  
  <p>I am using ProGuard, but ProGuard does NOT obfuscate AndroidManifest ( which is even not possible as far as I read ) and it also does not obfuscate any <code>String</code> API KEY ( I don't know why)</p>
  
  <p>I don't have any experience with DexGuard. </p>
  
  <p>Can you please tell me if this website is working or can you please give some more tips how to hide api keys in manifest and also in source code.</p>