title: How to securely store access token and secret in Android?
body: <p>I am going to use oAuth to fetch mails and contacts from google. I don't want to ask the user each time to log in to obtain an access token and secret. From what I understood, I need to store them with my application either in a database or <code>SharedPreferences</code>. But I am a bit worried about security aspects with that. I read that you can encrypt and decrypt the tokens but it is easy for an attacker to just decompile your apk and classes and get the encryption key.<br>
  <strong>What's the best method to securely store these tokens in Android?</strong></p>