# Is there a way to obfuscate the apk?

**URL:** https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139
**Category:** Questions about Thunkable X
**Created:** [January 16, 2020, 12:23pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139 "2020-01-16T12:23:58Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![ostrakos](https://avatars.discourse-cdn.com/v4/letter/o/f0a364/32.png) [@ostrakos](https://community.thunkable.com/u/ostrakos)
#### Post date: [January 16, 2020, 12:23pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/1 "2020-01-16T12:23:58Z")

</div>

Obviously there is **no way to obfuscate the code of the android apk with thunkable**. Is this right?

Theoretically it **can be done via Android Studio** , using proguard: the .apk (compiled by thunkable) needs to opened in debug mode and then it’s behavior can be customized with the proguard files. If Thunkable does not provide code obfuscation, would this be a viable way?

---

<div class="post-metadata">

### Author: ![Conor](https://avatars.discourse-cdn.com/v4/letter/c/9d8465/32.png) [@Conor](https://community.thunkable.com/u/Conor)
#### Post date: [January 16, 2020, 12:37pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/2 "2020-01-16T12:37:34Z")

</div>

I think Thunkable X apps are already obfuscated using ProGuard when they are compiled. I’m not 100% certain though so the Thunkable developers will have to confirm that.

---

<div class="post-metadata">

### Author: ![ostrakos](https://avatars.discourse-cdn.com/v4/letter/o/f0a364/32.png) [@ostrakos](https://community.thunkable.com/u/ostrakos)
#### Post date: [January 16, 2020, 4:49pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/3 "2020-01-16T16:49:22Z")

</div>

Many thanks! I am waiting for 2 days now for them to respond. You can easily see whether the files are obfuscated with proguard after opening the .apk in debug mode. The classes must have names like ‘a’ and ‘b’. This makes it very complicated to decompile an app.

I just need to know how this requirement is met, before I start to create an app and eventually subscribe to the thunkable service. I hope they are so professional to provide an answer to this. 😀

Thanks again!

---

<div class="post-metadata">

### Author: ![Oxygentiq](https://avatars.discourse-cdn.com/v4/letter/o/4da419/32.png) [@Oxygentiq](https://community.thunkable.com/u/Oxygentiq)
#### Post date: [January 16, 2020, 11:27pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/4 "2020-01-16T23:27:23Z")

</div>

Be aware, that even if the service you want exists, it doesn’t lull you into a false sense of security.

If someone is determined enough they will be able to hack your app.

If you are planning to make an app that will handle particularly sensitive data eg real names, addresses, social security numbers, bank account or credit card numbers, health information, etc then it may be worth getting professional and impartial advice.

---

<div class="post-metadata">

### Author: ![ostrakos](https://avatars.discourse-cdn.com/v4/letter/o/f0a364/32.png) [@ostrakos](https://community.thunkable.com/u/ostrakos)
#### Post date: [January 17, 2020, 9:24am UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/5 "2020-01-17T09:24:28Z")

</div>

Hello,

thank you for your reply. 😀

Code obfuscation is a standard practice in Android development and Thunkable should provide this functionality. It is not about sensitive data but about making it hard for a hacker to decompile the app.

It is a bit disappointing that the support team of Thunkable is not answering my chat request for a few days now and that there is no mention about this question in their documentation. Thanks again!

---

<div class="post-metadata">

### Author: ![Chris](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/chris/32/78883_2.png) [@Chris](https://community.thunkable.com/u/Chris)
#### Post date: [January 17, 2020, 5:34pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/6 "2020-01-17T17:34:38Z")

</div>

Hi,

If this should prevent an .apk file from being de- and recompiled / edited then I doubt this is done to Thunkable X apps by default because I was able to decompile and recompile Thunkable X .apk with APK Editor Studio for testing purposes (wanted to get an app running on Android TV).

Best, Chris

---

<div class="post-metadata">

### Author: ![ostrakos](https://avatars.discourse-cdn.com/v4/letter/o/f0a364/32.png) [@ostrakos](https://community.thunkable.com/u/ostrakos)
#### Post date: [January 17, 2020, 5:50pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/7 "2020-01-17T17:50:09Z")

</div>

Hello Chris,

I also guess, that Thunkable is not obfuscating the code. I will make a simple app and try it out by opening it in the profiling/debug mode in Android Studio. Then I see. After having decompiled the .apk, I then try to add the obfuscation files. Thanks for your answer!

---

<div class="post-metadata">

### Author: ![Conor](https://avatars.discourse-cdn.com/v4/letter/c/9d8465/32.png) [@Conor](https://community.thunkable.com/u/Conor)
#### Post date: [January 17, 2020, 5:56pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/8 "2020-01-17T17:56:31Z")

</div>

> [@Chris](#):
>
> prevent an .apk file from being de- and recompiled

It isn’t possible to prevent any app from being decompiled, even in Android Studio, all code can be decompiled. The discussion here is whether Thunkable use ProGuard to obfuscate the apk. This jumbles up the code and makes it almost unreadable to help stop the code from being copied and to protect sensitive information from being accessed.

I decompiled an app created with Thunkable X and it looks like the code is obfuscated, most of the classes, packages, variable names and methods have randomised names.

---

<div class="post-metadata">

### Author: ![ostrakos](https://avatars.discourse-cdn.com/v4/letter/o/f0a364/32.png) [@ostrakos](https://community.thunkable.com/u/ostrakos)
#### Post date: [January 17, 2020, 6:41pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/9 "2020-01-17T18:41:12Z")

</div>

With proguard the class names are hidden and the whole structure of the code becomes very hard to read. The classes for example get names like ‘a’ and ‘b’. I was just wondering whether I should use Thunkable for simple apps without doing it natively. Thanks again!

---

<div class="post-metadata">

### Author: ![actech](https://avatars.discourse-cdn.com/v4/letter/a/3d9bf3/32.png) [@actech](https://community.thunkable.com/u/actech)
#### Post date: [January 18, 2020, 1:21pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/10 "2020-01-18T13:21:27Z")

</div>

Are you sure that hackers need to look at your code? They can look at the idea, hack the app and make it free, build it with their own key, throw out ads, and so on. For this don’t need to know the class structure to do this. I don’t think you can use Thunkabe X to make an app that can’t be replicated in Android Studio.

---

<div class="post-metadata">

### Author: ![ostrakos](https://avatars.discourse-cdn.com/v4/letter/o/f0a364/32.png) [@ostrakos](https://community.thunkable.com/u/ostrakos)
#### Post date: [January 18, 2020, 2:45pm UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/11 "2020-01-18T14:45:20Z")

</div>

Thanks!

---

<div class="post-metadata">

### Author: ![ioannis](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/ioannis/32/146956_2.png) [@ioannis](https://community.thunkable.com/u/ioannis)
#### Post date: [November 8, 2024, 11:45am UTC](https://community.thunkable.com/t/is-there-a-way-to-obfuscate-the-apk/411139/12 "2024-11-08T11:45:59Z")

</div>


