How to provide a secure connection to the site's API in a WinPhone application?

Question

API

Hello!
How to ensure a "closed" connection to the API of your own site when developing a mobile application for windows phone?
That is, so that the id / password by which the access_token will eventually be obtained is not available to prying eyes, for example, through decompiling the application, or viewing network requests.
Thank you
\\ the app will be published in the Windows Store

Answer 1

no way, this site has an ssl certificate https://

Answer 2

1. Work strictly through https
2. Do not store or hardcode passwords in applications, and indeed any important information
3. Using native C ++ to work with Web API will make decompilation much more difficult.

Answer 3

1) Best practice for saving sensitive data in Windows 8
2) Security best practices for building Windows Store apps
3) Building Secure Windows Phone 8 Apps
If they can decopy as a project, they will see the line right in the debugger :)