Check if the Android application is connected to the server you made

Question

Is it possible to check if my application made with libGdx is the one I made when it connects to my server? I need to know this because I want to check if my application has changed / changed me.

Or people can not change my application when it is in the appstore / Google Play Store?

Answer 1

To check if your application is the same or not, it is easy to get .apk files. Then you can calculate the hash code from the binary data of the file. How to do it: How to calculate MD5 file .

If you don’t have apk files to compare, as some users hacked your application, it’s basically too late, and the only thing you can do is add some server-side validation, but it still won’t stop the hacker from generating any valid inquiries.

As a prevention for the future, you can use ProGuard / DexGuard to confuse your application and make it more difficult (but not impossible) for a hacker to crack your application.

In general, you can never be sure that your customers have not been hacked. You need to apply server-side validation and be paranoid all the time.

Answer 2

Why not check out Google Play Game Services? Against piracy.

https://developers.google.com/games/services/android/antipiracy

This is not the exact solution you are looking for, what you are looking for is, in fact, impossible to fulfill with 100% accuracy.

What this anti-piracy will do: if they have not bought your game from Google Play, you can detect it and process it as you want. Like the application does nothing, or tell the server that this copy is not legal.

In the end, you may need to use several different tactics.