Where should an authentication token be stored on Android?
- A EncryptedSharedPreferences or the Android Keystore
- B Plain SharedPreferences
- C A static field
- D The app's log output
Answer
EncryptedSharedPreferences or the Android Keystore
Plain preferences are readable on a rooted device and can be included in backups, so credentials do not belong there.





