When a debugger is enabled it could allow for entry points in the application or reveal sensitive information.

In Android applications either set the android:debuggable attribute to false or do not include it in the manifest. The default value when not included is false.

In the example below, the android:debuggable attribute is set to true.

The corrected version sets the android:debuggable attribute to false.
  • Android Developers: The android:debuggable attribute.
  • Android Developers: Enable debugging.