I have an app that connects and updates a users facebook status. I have ofcourse got a key for my app to verify who it is. Does this need to be encrypted and if so how can I achieve this. I have no previous knowledge of encryption and little of java so please could you link to anything useful as well.
Thanks
Its never a bad idea to encrypt any sensitive data. But if you are using Eclipse and the ADK to develop your app, the whole app is obfuscation with proguard. (see: http://developer.android.com/guide/developing/tools/proguard.html ) This makes it much harder to find the string, but not impossible.
Its not hard to encyrpt and decript strings in Android. Here is a short example:
http://www.androidsnippets.com/encryptdecrypt-strings
Something to keep in mind is that eventualy the string will be decrypted in memory and passed to a function. If someone is running your app in the emulator or device with in circuit emulation they will get the string. Just be ready for it, and have a plan with how to deal with it.