MegatronKing/StringFog

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2014 stars · 405 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

StringFog is a Gradle plugin for Android that automatically encrypts string literals in compiled bytecode (dex/aar/jar) at build time and decrypts them at runtime. It supports Java and Kotlin, pluggable encryption algorithms, and works alongside ProGuard obfuscation.

Use cases

• hide hardcoded strings in my android apk from reverse engineering
• encrypt string literals in dex bytecode automatically at build time
• protect api keys and secrets embedded in android app code
• apply string encryption to aar and jar library files
• use a custom encryption algorithm for android string obfuscation
• integrate string obfuscation into my gradle build for android

When to choose

• you ship an Android app or library and want to deter static analysis of embedded strings
• you want fully automated, Gradle-integrated string encryption with no source changes
• you need pluggable encryption implementations and per-package encryption scope

When to avoid

• you need strong cryptographic protection of secrets at runtime (decryption key ships in the app)
• you rely on InstantRun or AGP setups without BuildConfig
• you are not building for Android/JVM bytecode

Facets

plugin · maturity maintenance

security cryptography build-tool compiler android-tools security developer-tools mobile-development jvm bytecode-obfuscation string-encryption gradle-plugin dex apk-hardening reverse-engineering-protection android gradle

Member repositories

For agents

markdown · JSON · MCP: product_card(name="MegatronKing/StringFog")