Storing AuthLogin and AuthPassword on Android

Question

I am using Acrarium-Acra to collect debug logs for customer facing issues in my Android App. Acrarium generates a unique AuthLogin and AuthPassword pair for the application.

httpSender {
    uri = "/report" /*best guess, you may need to adjust this*/
    basicAuthLogin = "GvDez9x0JyhdzyXR"
    basicAuthPassword = "wWg1bbKYtciU7Yqs"
    httpMethod = HttpSender.Method.POST
}

I don't think it is safe to store the AuthLogin and AuthPassword as hard coded strings in my application. Are there any recommendations on storing these values?

Answer 1

How about EncryptedSharedPreferences? It can encrypts keys and values.

Work with data more securely

Wraps the SharedPreferences class and automatically encrypts keys and values using a two-scheme method:

Keys are encrypted using a deterministic encryption algorithm such that the key can be encrypted and properly looked up. Values are encrypted using AES-256 GCM and are non-deterministic.