Debuggable APK Checker
Paste your AndroidManifest and check whether android:debuggable is enabled — a flag you never want in a release build.
About Debuggable APK Checker
Paste your AndroidManifest and check whether android:debuggable is enabled — a flag you never want in a release build.
Debuggable APK Checker is part of APKLint’s manifest & configuration toolkit — Audit your AndroidManifest and security config. It’s free to use and needs no account.
Your privacy is the default: what you submit is processed on our servers over an encrypted connection for that request only — it isn’t written to file or object storage, and never shared.
What Debuggable APK Checker checks
- Whether android:debuggable is set to true
- Why a debuggable release build is risky
- Where the flag lives in the manifest
- What to set for a release build
Good to know: Paste-only manifest check. A debuggable release exposes the app to debugging and data extraction.
When to use Debuggable APK Checker
- Best for
- A one-question check: is android:debuggable enabled in your manifest, a flag that must be off for release.
- Not the right tool for
- Not a broad audit; it answers exactly one flag.
- What you get back
- Whether debuggable is set, and why it must be false in production.
- How it differs from related APKLint tools
- It is the single-flag version of a concern the Manifest Checker reports in passing.
- Limitations
- One flag only; pair with Manifest Checker for the rest.
How to use Debuggable APK Checker
- Paste your file — Paste your AndroidManifest.xml.
- Send for analysis — APKLint checks it on our servers over an encrypted connection.
- Review the findings — Work through each result with a short explanation of why it matters.
- Nothing is stored — Your pasted text is processed for this request only — it isn't written to file or object storage, logged for analytics, or shared.
Why use APKLint
Every tool is free with no login and no paywall. Reasonable file and input limits keep the free service stable.
A clean, focused interface with no third-party ad banners cluttering your results.
What you submit is processed for the request only — it isn't written to file or object storage, and never shared.
Parses the XML or text you paste with a hardened parser (defusedxml).
Start immediately — no account, login, or email required.
Runs in any modern browser, on desktop or mobile.
Frequently asked questions
What does Debuggable APK Checker do?
Paste your AndroidManifest and check whether android:debuggable is enabled — a flag you never want in a release build.
Why must release builds not be debuggable?
A debuggable build lets anyone attach a debugger and read app data. Release builds must ship with debuggable disabled.
Is it free to use?
Yes. Every tool on APKLint is completely free, with no sign-up and no account.
How is my data handled?
What you submit is sent to our backend over an encrypted connection only to produce your result. It isn't written to file storage, used for analytics, or shared.
What should I paste in?
Paste your AndroidManifest.xml.