title: Android- Secure client server communication
body: <p>I am very new to writing apps so please bear with me :)</p>
  
  <p>I am writing an Android app that communicates with my server to send GET request and get some data from the server and show it to client (android app user).</p>
  
  <p><strong>API URL</strong>:
  <a href="http://myserver.com/get.php" rel="nofollow">http://myserver.com/get.php</a></p>
  
  <p><strong>GET data/variables</strong></p>
  
  <ol>
  <li><strong>api</strong>: my api key</li>
  <li>extra GET variables</li>
  </ol>
  
  <p>It'd be like:
  <a href="http://myserver.com/get.php?api=XXXXXXXXXXXXXXXXXXX&amp;extra=something&amp;fields=here" rel="nofollow">http://myserver.com/get.php?api=XXXXXXXXXXXXXXXXXXX&amp;extra=something&amp;fields=here</a></p>
  
  <p>So can an attacker see the API key by decoding the app with tools like apktool, smali etc? If yes  then how can I secure it?</p>