6 Most-Recommended Code Obfuscation Tools

6 Most-Recommended Code Obfuscation Tools

One of the biggest challenges for app publishers is facing a series of bans imposed by platforms or services identifying multiple accounts or identical codes as being linked with each other. In this case, code obfuscation technology can effectively differentiate codes so that they will not trigger system detection, helping to prevent large-scale app bans.
This article introduces 6 most-recommended code obfuscation tools to enhance app security and compliance.

6 most-recommended code obfuscation tools

1. ProGuard

ProGuard is a native Android tool for code shrinking and obfuscation. It renames code classes, methods, and variables to make them harder to understand. This improves app security and reduces file size.
ProGuard allows developers to customize obfuscation (using a dictionary of rules) to ensure that the obfuscated code paths are different each time. You are advised not to upload the mapping file to Google’s backend, as it could expose the obfuscation details, making the code easier to reverse-engineer.
Website: https://developer.android.com/build/shrink-code

2. AndResGuard

Unlike ProGuard which focuses on code obfuscation, AndResGuard is a tool for resource obfuscation. It renames and obfuscates resource names. For example, AndResGuar can shrink a resources path from res/drawable/logo to a/b/c.
Website: https://github.com/shwenzhang/AndResGuard

3. AabResGuard

AabResGuard is very similar to AndResGuard in terms of functionality. It is a tool for resource obfuscation in AAB (Android App Bundle) files. It renames and obfuscates resource names in the bundle, which is easier to use for Android developers.
Website: https://github.com/bytedance/AabResGuard

4. XmlClassGuard

XmlClassGuard is designed for obfuscating XML files. It focuses on obfuscating class names in XML layouts.
XmlClassGuard can work alongside ProGuard. ProGuard obfuscates Java code, while XmlClassGuard obfuscates XML class references. Together, they provide more comprehensive protection for AABs from getting rejected or banned on Google Play.
Website: https://github.com/liujingxing/XmlClassGuard

5. StringFog

StringFog is a tool to encrypt sensitive strings in Android apps that are packaged as a DEX (Dalvik Executable), AAR (Android Archive), or JAR (Java Archive) file. These protected strings are typically used in app descriptions and metadata, which could trigger unwanted Google Play’s automated or manual review process if detected.
Website: https://github.com/MegatronKing/StringFog

6. App Hardening Tools

The tools mentioned above are focused primarily on code obfuscation and resource protection. They make an app’s code harder to reverse-engineer, thereby protecting sensitive data in the app. On the other hand, app hardening tools (also referred to as app security apps) go beyond just code obfuscation. They are designed to secure an app against various types of cyber-attacks.
However, there are debates around app hardening tools that stem from overprotection and compliance concerns.

  • Using app hardening tools can potentially raise suspicion on Google Play because it might be seen as indicators that the the app is trying to hide improper data and avoid detection.
  • Google Play’s guidelines require apps to provide unique, high-quality content that adds value to users. However, apps obscured by app hardening tools may appear uniform in terms of their underlying structure and content, making them look generic or identical to Google’s automated review systems. As a result, masked apps may be flagged for failing to meet these standards and get rejected.
  • Besides, app hardening techniques often include dynamic loading of DEX, where an Android app loads parts of its code (in the form of DEX files) at runtime based on specific conditions or use cases, rather than loading everything upfront. This can be a red flag when it comes to Google Play’s app review guidelines as it leads to security issues.
While app hardening tools offer significant security benefits for developers by protecting against reverse engineering and tampering, their use can also raise concerns during the Google Play review process. Therefore, it is crucial for businesses to not only rely on third-party security tools but also to focus on developing secure and transparent apps from the ground up. At the end of the day, businesses can take full control of their app and ensure app store compliance only when it is truly safe and trustworthy.

About Us

ROIBest is a software service company headquartered in Singapore, pioneering in Android progressive web app (PWA) solutions. We provide Android developers with an innovative app distribution & advertising solution that does not depend on app stores, saves in-app purchase commissions, and eliminates harmful file warnings. Our feature-rich product supports AudienceCloud, traffic deduplication, and intelligent push notifications, enabling business success in global markets.

roibest, pioneer in non-removable Android apps, No.1 PWA service provider
PWA & Google Ads Bidding Strategies

PWA & Google Ads Bidding Strategies

When developing bidding strategies for Google Ads, several factors should be taken into account to optimize your campaign performance, such as your advertising objectives, budget constraints, market competition, and product strength. Ultimately, you need to test and adjust your strategy based on performance data. Therefore, tracking and evaluating performance is essential to maximize your ROI, and this is where attribution technology comes in.
Google ads placement strategies

Key Things for Bidding on Google Ads

1. Personalized Bidding and Adjustment Techniques

Experienced advertisers often recommend tailoring bidding strategies based on product competitiveness, campaign performance, and ad quality score. By analyzing conversion data from past campaigns, you can develop personalized bidding and adjustment techniques that fit your specific product. For example, continually test different bidding strategies and adjust bids based on real-time performance to maximize conversions at the most efficient cost.

2. Smart Bidding with Google

Google’s Smart Bidding uses machine learning, but for it to be effective, it requires a solid data foundation. The key is accumulating conversion data, understanding product competitiveness, and ensuring precise audience targeting. The more accurate and relevant data you provide, the better Smart Bidding can optimize your campaigns.

3. Strategy for New Product Launches

For new products with uncertain competitiveness, it’s often suggested to start with manual CPC bidding in search ads to gather conversion data. Once enough data is accumulated and the product’s performance becomes clearer, you can shift to automated bidding strategies like Target CPA or Maximize Conversions to scale efficiently.

4. Leveraging User Data for Audience Targeting

Smart Bidding campaigns perform better when you incorporate user data for precise audience targeting. Using first-party data such as customer emails (e.g., from purchases, sign-ups, or Google Analytics) or postback data from service providers like ROIBest can improve targeting accuracy and help drive better results by ensuring that ads are shown to the most relevant audience.

Progressive Web Apps (PWAs) and Google Ads Optimization

PWAs offer a powerful alternative to traditional mobile apps, especially when integrated with Google Ads campaigns.
One of the key strengths of PWAs is their ability to gather comprehensive, real-time data on user interactions across multiple platforms. Since PWAs work seamlessly across devices, this allows you to track user behavior in a consistent and integrated manner. Through attribution technology, you can connect actions such as receiving push notifications, visiting specific pages, or completing purchases, even if those actions happen after the user has interacted with your ad or promotional message. This provides a more complete and accurate picture of the customer journey, and detailed attribution data can help you make informed decisions about which parts of your strategy are working and which need adjustment.
ROIBest combines attribution technology with their Android PWA solution. It offers advertisers cross-device real-time insights to optimize their Google Ads campaigns, ensuring that they reach the right people with the right messages on the right platform, driving better results with more accurate data.

About Us

ROIBest is a software service company headquartered in Singapore, pioneering in Android progressive web app (PWA) solutions. We provide Android developers with an innovative app distribution & advertising solution that does not depend on app stores, saves in-app purchase commissions, and eliminates harmful file warnings. Our feature-rich product supports AudienceCloud, traffic deduplication, and intelligent push notifications, enabling business success in global markets.

roibest, pioneer in non-removable Android apps, no.1 PWA service provider
Google Play Reinstates Bigo, Tango, and Similar Apps Amid Content Policy Updates

Google Play Reinstates Bigo, Tango, and Similar Apps Amid Content Policy Updates

In a recent development, Google Play has removed several popular social and live streaming apps from its Play Store, including Bigo and Tango. This move has raised questions regarding the platform’s stance on user-generated content (UGC) and its enforcement of CSAE (Child Sexual Abuse and Exploitation) policies. Apps like Bigo, Tango, and others typically allow live interactions between users, which can sometimes lead to the spread of inappropriate content, making them more vulnerable to CASE policy breaches.
In order to show compliance with the new content and safety standards, developers of those apps are required to fill out the Children’s Safety Standard Declaration and submit other CSAE-related documentation to Google Play.
Google Play reinstates Bigo, Tango, and similar apps amid policy updates

Filling Out the Children's Safety Standard Declaration

Here is a breakdown of the steps and requirements:

1. Provide a URL for "Safety Standards" Compliance

  • Add a link to the CSAE compliance statement in your app’s Privacy Policy or Terms of Service.
  • Ensure that the link is functional at all times and accessible to users in the app.
  • Provide this link to Google Play via the Play Console when submitting or updating your app.

2. Incorporate a Child Content Reporting Mechanism

Developers must add an in-app feedback mechanism that allows users to report child safety concerns directly within the app. This mechanism is required to allow users (including parents or guardians) to report inappropriate content or behavior involving minors, including potential CSAE violations. Then, in your Google Play Console or app management center, you need to provide proof that the reporting feature has been integrated properly.

What Else Can Developers Do in Face of Google Play's Stricter Scrutiny?

After the initial removals on December 16, some top social and live streaming apps like Bigo, Tango, and LiveMe were reinstated, indicating that the developers either made necessary changes to meet the stringent standards or Google Play revised its approach. For instance, Tango returned soon after 7 days without any updates, as the app version remains the same as the day it was removed (#8.80.1732719153). Whereas, it took 2 weeks for Bigo’s developers to make adjustments to the app and submit an updated version (from #6.22.4 to #6.23.2) before being reinstated on December 20.
Here are some suggestions and practices for developers to cope with Google’s tighter app review policies, especially related to CSAE content and ensuring safe, continuous app operations:

1. Develop Internal Safety Guidelines

Establish comprehensive internal guidelines that specifically address CSAE issues. These guidelines will help internal teams identify, prevent, and address CSAE-related content, particularly within apps involving UGC or live streaming.

2. Streamline and Enable Easy Reporting Channels

Implement clear reporting mechanisms within the app that comply with local laws. Users should be able to report suspected CSAE content or other harmful behaviors easily without leaving the app.

3. Use Technology to Detect CSAE Content

Leverage automated technologies (e.g. hash matching, image classifier, keyword extraction tools) to scan content for CSAE, including images, videos, and text. This technology can help detect inappropriate or harmful content proactively.

4. Ongoing Monitoring and Updates

Regularly update the app’s policies and safety features to align with new legal requirements or changes in Google Play’s content guidelines. Ensure continuous monitoring of the app’s compliance.

5. Adopt Progressive Web Apps

While Google Play’s stricter policies are meant to protect users and create a safe online environment, the enforcement has put social and live streaming app developers under constant compliance pressure. Listing apps on the platform has become more difficult than ever as apps are being thoroughly scrutinized in the lengthy approval process. In this context, the Progressive Web App (PWA) solution offered by ROIBest emerges as an attractive alternative.
PWAs allow developers to bypass the complexities of traditional app stores, providing a seamless user experience directly through web browsers. With PWAs, there’s no need to worry about app store approvals, distribution fees, or platform restrictions. Developers can reach users on any device with a modern web browser, ensuring faster updates, improved accessibility, and greater flexibility. This approach not only eliminates the friction associated with app store listings but also positions developers to take full control of their app’s lifecycle while delivering a high-quality experience to users across multiple platforms.

About Us

ROIBest is a software service company headquartered in Singapore, pioneering in Android progressive web app (PWA) solutions. We provide Android developers with an innovative app distribution & advertising solution that does not depend on app stores, saves in-app purchase commissions, and eliminates harmful file warnings. Our feature-rich product supports AudienceCloud, traffic deduplication, and intelligent push notifications, enabling business success in global markets.

roibest, pioneer in nin-removable Android apps, no.1 pwa service provider
Global App Downloads Decline by 2.3% in 2024

Global App Downloads Decline by 2.3% in 2024

Recovery in Global App Spending vs. Google Play Decline

On December 19, Appfigures, the app intelligence company, released its latest stats, revealing a steady rise in consumer in-app spending in 2024—marking the first increase since the economic slowdown of 2022.
A closer look at the numbers shows that the total spend amounting to $127 billion across platformswith an annual growth of 15.7%. This growth was largely driven by App Store which contributed $91.6 billion with 24% increase compared to last year, whereas Google Play saw a drop in its in-app purchases by 1.5% to $35.7 billion.
Global Consumer Spending in Mobile Apps

Image credit: Appfigures

Notable Decline in Global App Downloads

While the consumer in-app spending has shown an upward trend this year, the globle app downloads experienced a notable decline. In 2024, total mobile app downloads worldwide was down by 2.3% to 110 billion, with a more significant drop by 2.6% observed on Google Play falling to 81.4 billion.

Global Downloads of Mobile Apps

Image credit: Appfigures

Reasons Behind Decline and Challenges for Developers

This downturn is partially attributed to the enforcement of stricter review policies across app stores in 2024. For the past year, Google Play has carried out a rigorous purge on its listings, leading to the removal and rejection of numerous apps that failed to meet the updated standards. This move aiming to clear spams and improve app quality has resulted in a 60% decrease in newly published apps on the Play Store.
In addition to the policy changes on Google Play, the overall decrease in app downloads can be linked to market saturation and shifting user behaviors. As the app ecosystem matures, users are becoming more selective, often favoring established applications over new entrants. This trend poses challenges for developers striving to achieve visibility and user acquisition in an increasingly competitive environment.
To navigate this evolving landscape, developers are encouraged to prioritize app quality, intuitive user interface, and most importantly, innovative features that meet user needs. Emerging solutions like Progressive Web Apps (PWAs) that streamline development process and enhance user experience also provide new perspectives for developers.

About Us

ROIBest is a software service company headquartered in Singapore, pioneering in Android progressive web app (PWA) solutions. We provide Android developers with an innovative app distribution & advertising solution that does not depend on app stores, saves in-app purchase commissions, and eliminates harmful file warnings. Our feature-rich product supports AudienceCloud, traffic deduplication, and intelligent push notifications, enabling business success in global markets.

roibest, non-removable Android apps, no.1 PWA service provider
World’s Top 5 Progressive Web App Tools

World’s Top 5 Progressive Web App Tools

Progressive Web Apps (PWAs) are transforming the way we build web experiences, offering the best of both web and mobile apps. To create high-performance PWAs, developers need the right tools for development, testing, and deployment. In this article, we highlight the top 5 PWA tools that help streamline the process, ensuring faster, more reliable apps. 

1. ROIBest

ROIBest is a Singapore company that specializes in Progressive Web App (PWA) packaging and advertising solutions, offering a range of standout features that set it apart from other providers in this industry.
With ROIBest, developers can convert their website into a PWA with one click by just providing an URL. The plaltform includes robust features like domain resolution and protection, ad attribution tracking, and promo link creation.
As a cutting-edge PWA tool, ROIBest delivers the most comprehensive app packaging and distribution capabilities, all within an intuitive and user-friendly interface.

2. PWABuilder

PWABuilder is a PWA tool created by Microsoft that helps developers easily convert their websites into PWAs. PWABuilder streamlines only the PWA creation process by generating service workers, app manifests, and packaging apps for platforms like iOS, Android, and Microsoft Store.

3. Workbox

Workbox is a set of powerful libraries and tools developed by Google to simplify the process of adding offline support and advanced caching to PWAs. However, Workbox primarily focuses on offline capabilities, without providing tools for managing online interactions or live data updates.

4. Lighthouse

Lighthouse is another open-source tool from Google designed to audit and improve the quality of web apps, including PWAs. It provides actionable insights to enhance user experiences, but does not assist with the actual implementation or packaging of PWAs, leaving developers to rely on other tools or services for those critical steps.

5. PWAify

PWAify is a JavaScript library that allows developers to convert their traditional websites into PWAs with minimal effort. It simplifies the process by generating basic service workers and app manifests, making it suitable for small-scale projects or developers just starting with PWAs while looking to improve user experience with capabilities like offline mode and push notifications.

About Us

ROIBest is a software service company headquartered in Singapore, pioneering in Android progressive web app (PWA) solutions. We provide Android developers with an innovative app distribution & advertising solution that does not depend on app stores, saves in-app purchase commissions, and eliminates harmful file warnings. Our feature-rich product supports AudienceCloud, traffic deduplication, and intelligent push notifications, enabling business success in global markets.

roibest, pioneer in non-removable Android apps, no.1 PWA service provider
Verified by MonsterInsights