Lint, analyze, and secure your Android app.
61 free tools to decompile APK and AAB files, audit your manifest, scan for security and malware risks, and prepare for Google Play review — no signup, no on-page ad banners.
APKLint is an online toolkit for inspecting and analysing Android APK files. 61 free tools to decompile APK and AAB files, audit your manifest, scan for security and malware risks, and prepare for Google Play review — no signup, no on-page ad banners. Browse the free Android tools below — most run entirely in your browser, with nothing to upload here.
APK & AAB analysis
Unpack, inspect, and break down Android packages.
Android App Scanner
Upload an APK for a fast structural and risk scan: permissions, components, signing, manifest security flags, and size.
Open tool →APK Checker
Quickly inspect any APK: package name, version, SDK levels, permissions, and signature, before you ship or install it.
Open tool →APK Analyzer Online
Break down an APK the way Android Studio's APK Analyzer does: DEX and method counts, resources, native libraries, and total size.
Open tool →APK Scanner Online
Inspect the contents of an APK — files, manifest, permissions, and signing — in a single upload.
Open tool →APK Inspector
Open up an APK and inspect its manifest, permissions, components, and certificates without installing anything.
Open tool →APK Size Optimization Guide
See exactly what is making your APK large — DEX, resources, assets, native libs — and get concrete, build-safe ways to shrink the download size for Google Play.
Open guide →Android App Analyzer
Upload an APK for a full breakdown: metadata, permissions, components, libraries, and structure.
Open tool →Android Signing Certificate Checker
Read an APK's signing certificate — v1/v2/v3 scheme, SHA-1 and SHA-256 fingerprints, issuer, and validity — to verify who signed the app and confirm its identity.
Open tool →APK Signature Checker
Verify an APK's signing scheme (v1/v2/v3) and read its certificate fingerprints (SHA-1, SHA-256), issuer, and validity dates in seconds, on screen.
Open tool →AAB Analyzer
Inspect an Android App Bundle: its protobuf base manifest, feature and asset modules, configuration, and declared permissions, all from the .aab on screen.
Open tool →APK Size Analyzer
See exactly what's inside an APK by size — the biggest files, native libraries, resources, and assets — so you can find what's bloating your download.
Open tool →APK Scan Report Generator
Run a full security pass on an APK: manifest flags, exposed secrets, privacy-sensitive APIs, third-party SDKs, plus a ClamAV and YARA scan, in one report.
Open tool →Decompile & reverse engineering
Turn a built app back into readable code and resources.
APKTool Online Alternative
Unpack and decode an APK's resources, AndroidManifest, and smali — a hosted, no-install alternative to running apktool on your own machine.
Open tool →APK Decompiler Online
Decompile an APK back into readable Java and Kotlin-style source and resources so you can understand how an app is built.
Open tool →DEX / Smali Analyzer
Disassemble an APK's DEX into smali and decode its resources, with class/method counts and a downloadable smali tree.
Open tool →Flutter APK Analyzer
Detect and analyze Flutter apps inside an APK, including framework details and bundled assets.
Open tool →React Native APK Analyzer
Detect and analyze React Native apps inside an APK, including the JavaScript bundle where it's readable.
Open tool →Unity APK Analyzer
Detect and analyze Unity games inside an APK, including the scripting backend (IL2CPP or Mono), assemblies, and asset bundles, to see how it's built.
Open tool →ProGuard / R8 Obfuscation Checker
Check whether an APK's code is obfuscated with ProGuard or R8 and how thoroughly, from the ratio of readable to short machine-style class and package names.
Open tool →Security & malware
Find risky behavior, trackers, and suspicious patterns.
APK Malware Risk Analyzer
Scan an APK for malware indicators and risky behavior using open-source engines — an honest risk read, not a single-vendor verdict.
Open tool →Mobile App Security Audit
Run a static, OWASP-style security review of your APK: insecure settings, exposed components, and best-practice gaps.
Open tool →OWASP MASVS Android Checklist
Work through the OWASP MASVS mobile security checklist for Android, item by item, to verify your app's defenses.
Open guide →APK Security Scanner
Statically scan an APK for security weaknesses: insecure flags, exposed surfaces, and configuration risks.
Open tool →APK Suspicious Behavior Scanner
Surface suspicious behaviors in an APK — risky API combinations, permissions, and patterns worth a closer look.
Open tool →Ad SDK / Tracker Detector
Detect the ad SDKs and third-party trackers bundled inside an APK and the data they tend to touch.
Open tool →APK Vulnerability Scanner
Scan an APK for security weaknesses: insecure settings, exposed components, hard-coded secrets, risky permissions, and suspicious code patterns. Not a CVE scan.
Open tool →Privacy-Sensitive API Checker
Detect references to privacy-sensitive APIs — device IDs, location, IMEI-style calls — inside an APK's code.
Open tool →SDK Scanner
Enumerate the SDKs bundled in an APK so you can cross-check each against the Google Play SDK Index.
Open tool →Firebase Config Scanner
Detect Firebase and Play Integrity / App Check components bundled in an APK. (Detection only — it can't prove server-side enforcement.)
Open tool →Manifest & configuration
Audit your AndroidManifest and security config.
Dangerous Permissions Checker
Paste your AndroidManifest and see exactly which dangerous permissions your app requests, and why each one matters.
Open tool →Debuggable APK Checker
Paste your AndroidManifest and check whether android:debuggable is enabled — a flag you never want in a release build.
Open tool →Network Security Config Checker
Paste your network security configuration and flag cleartext traffic, trust anchors, and debug overrides.
Open tool →Android Manifest Checker
Paste your AndroidManifest and get an instant audit of permissions, components, flags, and SDK levels.
Open tool →Cleartext Traffic Checker
Detect whether your app allows insecure cleartext (HTTP) traffic, and where to lock it down.
Open tool →Exported Component Checker
Find activities, services, and receivers exported in your manifest without protection, a common security gap.
Open tool →Target SDK Checker
Check your app's targetSdkVersion against Google Play's API 35 target rule (reviewed June 2026), and what raising the target SDK means for your next update.
Open tool →Min SDK / Compatibility Checker
Check an app's minSdk and targetSdk to understand which Android versions and devices it supports.
Open tool →Code quality
Static analysis for Kotlin, Java, and your Gradle build.
Android Code Checker
Paste Kotlin or Java and catch common Android mistakes, anti-patterns, and code smells before they reach review.
Open tool →Android Lint Online
Catch common Android correctness, performance, and security issues in pasted Java or Kotlin with fast static checks. Heuristic scan, not a full Lint build.
Open tool →Kotlin Static Analysis Tool
Catch common Kotlin code smells and risky patterns with fast static pattern checks. (Heuristic scan, not detekt/ktlint.)
Open tool →Gradle Dependency Checker
Paste your build.gradle to list every dependency and flag dynamic versions and version conflicts. For vulnerable versions, use the Gradle Vulnerability Scan.
Open tool →Android Static Code Analysis Tool
Paste a Java or Kotlin file or snippet and run fast static pattern checks for bugs, smells, and risky patterns. (One file at a time.)
Open tool →Android Build Analyzer
Lint your Gradle build setup and surface configuration issues that slow down or break builds.
Open tool →Android Bug Finder
Run static analysis on pasted Android Java/Kotlin source to surface likely bugs, risky API usage, null and lifecycle smells, and insecure patterns.
Open tool →Gradle Vulnerability Scanner
Check your Gradle dependencies against a curated list of known-vulnerable library versions. (Not a full CVE database.)
Open tool →Crash / ANR Analyzer
Paste a crash or ANR stack trace to get a readable breakdown — the exception, the root cause, and the most relevant app frames.
Open tool →Google Play & compliance
Prep your listing, policies, and release for the store.
Android Privacy Policy Generator
Generate a starter privacy-policy draft for your Android app by answering a few questions about the data it collects. Review before you publish.
Open tool →Google Play Data Safety Helper
Map your AndroidManifest permissions to Google Play Data Safety categories to help pre-fill the form. A permission-based estimate — also declare your SDKs.
Open tool →Google Play Policy Checker
Check your app against common Google Play Developer Program policies before you submit for review.
Open guide →Android Accessibility Checker
Check your Android app against accessibility best practices so more people can use it comfortably.
Open guide →Android Vitals Checklist Tool
Understand Android Vitals — crashes, ANRs, and stability — with a checklist to keep your app healthy on Google Play.
Open guide →Play Store Readiness Checker
A complete pre-launch checklist before publishing to Google Play — store listing, policy, signing, testing, and release readiness, so nothing slips through.
Open guide →AdMob Policy Checker
Check your AndroidManifest AdMob and advertising-ID (AD_ID) setup against Google Play policy, including the permission and App ID meta-data Play expects.
Open tool →Kids App Policy Checker
Check your app against Google Play's Families (kids) policy requirements before submitting.
Open guide →Android Release Checklist
Work through a practical pre-release checklist — versioning, signing, target SDK, permissions, listing — so nothing is missed before you ship an update.
Open guide →Google Play App Rejection Checker
Pre-check the most common reasons Google Play rejects or suspends apps — policy, permissions, data safety, target SDK — so you can fix them before you submit.
Open guide →Android Game Privacy Policy Checklist
A checklist for the privacy policy your Android game needs before you publish — what to disclose for ads, analytics, crash reporting, and kids.
Open guide →Android Performance Checker
Understand what affects Android app performance, with a checklist to keep it fast and smooth.
Open guide →ASO & store growth
Improve discoverability on Google Play.
Play Store ASO Listing Audit Tool
Audit a Google Play listing — title, summary, description, screenshots, rating — and get concrete ways to improve discoverability. Reads the public US/en page.
Open tool →Google Play Keyword Suggestion Tool
Discover Google Play keyword and title ideas mined from related US/English store search results to sharpen your listing. (US/en store; no search-volume data.)
Open tool →Google Play Rank Snapshot Checker
Take a point-in-time snapshot of where an Android app ranks for a keyword on Google Play (US/English store), so you can track your listing's search visibility.
Open tool →Your files are deleted automatically after analysis
The interactive tools run on our servers over an encrypted connection, and how long anything is held depends on the tool. Uploaded APK and AAB files, and the result files they produce, are permanently removed by the next hourly cleanup after analysis finishes; long scans are protected while they run. Paste and policy tools are processed only for your request and aren’t written to file or object storage. ASO tools read public Google Play data, which may be cached in memory for a few hours. Reference checklists run in your browser with nothing to upload. We never share anything you send, and you never need an account.
Encrypted · Wiped hourly · No account · No ad bannersAll product names, logos, and trademarks are property of their respective owners. APKLint is an independent toolset and is not affiliated with, endorsed by, or sponsored by Google, Android, or any other party.