Products
Products
Open-source Technology
Solutions
Resources
Company
This page lists all available options for ProGuard, grouped logically.
Android
R8, the default Android shrinker, is compatible with ProGuard keep rules. Both ProGuard and R8 were designed for app optimization, and although they employ minimal obfuscation techniques, they are not security tools and do not harden applications effectively against reverse engineering and tampering.
DexGuard is a protection tool for Android apps that is backward compatible with R8, making it easy to upgrade your R8 configuration with multi-layered security protections to your unprotected mobile application. Learn more in our blog: Android Security and Obfuscation Realities of R8.
@
filename-include
filename'.-include
filename-basedirectory
directoryname-injars
class_path-injars
options.-outjars
class_path-injars
options will be written to the named jars. This allows you to collect the contents of groups of input jars into corresponding groups of output jars. In addition, the output entries can be filtered, as explained in the filters section. Each processed class file or resource file is then written to the first output entry with a matching filter, within the group of output jars. You must avoid letting the output files overwrite any input files. For better readability, class path entries can be specified using multiple -outjars
options. Without any -outjars
options, no jars will be written.-libraryjars
class_path-libraryjars
options. Please note that the boot path and the class path set for running ProGuard are not considered when looking for library classes. This means that you explicitly have to specify the run-time jar that your code will use. Although this may seem cumbersome, it allows you to process applications targeted at different run-time environments. For example, you can process J2SE applications as well as JME midlets, just by specifying the appropriate run-time jar.-skipnonpubliclibraryclasses
-dontskipnonpubliclibraryclasses
-dontskipnonpubliclibraryclassmembers
-keepdirectories
[directory_filter]com.example.MyClass.class.getResource("")
". You'll then want to keep the directory corresponding to the package, "-keepdirectories com.example
". If the option is specified without a filter, all directories are kept. With a filter, only matching directories are kept. For instance, "-keepdirectories mydirectory
" matches the specified directory, "-keepdirectories mydirectory/*
" matches its immediate subdirectories, and "-keepdirectories mydirectory/**
" matches all of its subdirectories.-target
version1.0
,..., 1.9
, or the more recent short numbers 5
,..., 12
. By default, the version numbers of the class files are left unchanged. For example, you may want to upgrade class files to Java 6. ProGuard changes their version numbers and preverifies them. You can also downgrade class files to older versions than Java 8. ProGuard changes their version numbers and backports Java 8 constructs. ProGuard generally doesn't backport changes in the Java runtime, except for the Java 8 stream API and the Java 8 date API, if you add the backported libraries net.sourceforge.streamsupport
and org.threeten
as input, respectively.-forceprocessing
ProGuard Playground
The ProGuard Playground is a useful tool to help you further tweak the keep rules.
-keep
[,modifier,...] class_specification-keepclassmembers
[,modifier,...] class_specificationSerializable
interface.-keepclasseswithmembers
[,modifier,...] class_specification-keepnames
class_specification-keep
,allowshrinking
class_specification Specifies classes and class members whose names are to be preserved, if they aren't removed in the shrinking phase. For example, you may want to keep all class names of classes that implement the Serializable
interface, so that the processed code remains compatible with any originally serialized classes. Classes that aren't used at all can still be removed. Only applicable when obfuscating.-keepclassmembernames
class_specification-keepclassmembers
,allowshrinking
class_specification Specifies class members whose names are to be preserved, if they aren't removed in the shrinking phase. For example, you may want to preserve the name of the synthetic class$
methods when processing a library compiled by JDK 1.2 or older, so obfuscators can detect it again when processing an application that uses the processed library (although ProGuard itself doesn't need this). Only applicable when obfuscating.-keepclasseswithmembernames
class_specification-keepclasseswithmembers
,allowshrinking
class_specification Specifies classes and class members whose names are to be preserved, on the condition that all of the specified class members are present after the shrinking phase. For example, you may want to keep all native method names and the names of their classes, so that the processed code can still link with the native library code. Native methods that aren't used at all can still be removed. If a class file is used, but none of its native methods are, its name will still be obfuscated. Only applicable when obfuscating.-if
class_specificationpresent
to activate the subsequent keep option (-keep
, -keepclassmembers
,...). The condition and the subsequent keep option can share wildcards and references to wildcards. For example, you can keep classes on the condition that classes with related names exist in your project, with frameworks like Dagger and Butterknife.-printseeds
[filename]-keep
options. The list is printed to the standard output or to the given file. The list can be useful to verify if the intended class members are really found, especially if you're using wildcards. For example, you may want to list all the applications or all the applets that you are keeping.-dontshrink
-keep
options, and the ones on which they depend, directly or indirectly. It also applies a shrinking step after each optimization step, since some optimizations may open up the possibility to remove more classes and class members.-printusage
[filename]-whyareyoukeeping
class_specification-verbose
option if specified, the traces include full field and method signatures. Only applicable when shrinking.-dontoptimize
-optimizations
optimization_filter-optimizationpasses
n-assumenosideeffects
class_specificationSystem.currentTimeMillis()
returns a value, but it doesn't have any side effects. In the optimization step, ProGuard can then remove calls to such methods, if it can determine that the return values aren't used. ProGuard will analyze your program code to find such methods automatically. It will not analyze library code, for which this option can therefore be useful. For example, you could specify the method System.currentTimeMillis()
, so that any idle calls to it will be removed. With some care, you can also use the option to remove logging code. Note that ProGuard applies the option to the entire hierarchy of the specified methods. Only applicable when optimizing. In general, making assumptions can be dangerous; you can easily break the processed code. Only use this option if you know what you're doing!-assumenoexternalsideeffects
class_specification-assumenosideeffects
, because it allows side effects on the parameters or the heap. For example, the StringBuffer#append
methods have side effects, but no external side effects. This is useful when removing logging code, to also remove any related string concatenation code. Only applicable when optimizing. Making assumptions can be dangerous; you can easily break the processed code. Only use this option if you know what you're doing!-assumenoescapingparameters
class_specificationSystem.arrayCopy
does not let its reference parameters escape, but method System.setSecurityManager
does. Only applicable when optimizing. Making assumptions can be dangerous; you can easily break the processed code. Only use this option if you know what you're doing!-assumenoexternalreturnvalues
class_specificationProcessBuilder#start
returns a Process
reference value, but it is a new instance that wasn't on the heap yet. Only applicable when optimizing. Making assumptions can be dangerous; you can easily break the processed code. Only use this option if you know what you're doing!-assumevalues
class_specification-allowaccessmodification
-repackageclasses
option). Counter-indication: you probably shouldn't use this option when processing code that is to be used as a library, since classes and class members that weren't designed to be public in the API may become public.-mergeinterfacesaggressively
Specifies that interfaces may be merged, even if their implementing classes don't implement all interface methods. This can reduce the size of the output by reducing the total number of classes. Note that Java's binary compatibility specifications allow such constructs (cfr. The Java Language Specification, Third Edition, Section 13.5.3), even if they are not allowed in the Java language (cfr. The Java Language Specification, Third Edition, Section 8.1.4). Only applicable when optimizing.
Counter-indication: setting this option can reduce the performance of the processed code on some JVMs, since advanced just-in-time compilation tends to favor more interfaces with fewer implementing classes. Worse, some JVMs may not be able to handle the resulting code. Notably:
InternalError
when encountering more than 256 Miranda methods (interface methods without implementations) in a class.-optimizeaggressively
ArrayIndexOutOfBoundsException
to be thrown. Strictly speaking, this means that such an instruction can have a side effect. If this instruction is removed during optimization, the code will thus behave differently under specific circumstances. By default, such instructions are always preserved. Setting this option will lead to these instructions being candidates for removal during optimization. Additionally, class merging is only enabled when this option is set.-dontobfuscate
-printmapping
[filename]-applymapping
filename-useuniqueclassmembernames
in both obfuscation runs. Only a single mapping file is allowed. Only applicable when obfuscating.-obfuscationdictionary
filename#
sign are ignored. Note that an obfuscation dictionary hardly improves the obfuscation. Decent compilers can automatically replace them, and the effect can fairly simply be undone by obfuscating again with simpler names. The most useful application is specifying strings that are typically already present in class files (such as 'Code'), thus reducing the class file sizes just a little bit more. Only applicable when obfuscating.-classobfuscationdictionary
filename-obfuscationdictionary
. Only applicable when obfuscating.-packageobfuscationdictionary
filename-obfuscationdictionary
. Only applicable when obfuscating.-overloadaggressively
Specifies to apply aggressive overloading while obfuscating. Multiple fields and methods can then get the same names, as long as their arguments and return types are different, as required by Java bytecode (not just their arguments, as required by the Java language). This option can make the processed code even smaller (and less comprehensible). Only applicable when obfuscating.
Counter-indication: the resulting class files fall within the Java bytecode specification (cfr. The Java Virtual Machine Specification, first paragraphs of Section 4.5 and Section 4.6), even though this kind of overloading is not allowed in the Java language (cfr. The Java Language Specification, Third Edition, Section 8.3 and Section 8.4.5). Still, some tools have problems with it. Notably:
javac
compiler produces an exception when compiling with such a library (cfr. Bug #4216736). You probably shouldn't use this option for processing libraries.pack200
tool reportedly has problems with overloaded class members.java.lang.reflect.Proxy
can't handle overloaded methods.-useuniqueclassmembernames
Specifies to assign the same obfuscated names to class members that have the same names, and different obfuscated names to class members that have different names (for each given class member signature). Without the option, more class members can be mapped to the same short names like 'a', 'b', etc. The option therefore increases the size of the resulting code slightly, but it ensures that the saved obfuscation name mapping can always be respected in subsequent incremental obfuscation steps.
For instance, consider two distinct interfaces containing methods with the same name and signature. Without this option, these methods may get different obfuscated names in a first obfuscation step. If a patch is then added containing a class that implements both interfaces, ProGuard will have to enforce the same method name for both methods in an incremental obfuscation step. The original obfuscated code is changed, in order to keep the resulting code consistent. With this option in the initial obfuscation step, such renaming will never be necessary.
This option is only applicable when obfuscating. In fact, if you are planning on performing incremental obfuscation, you probably want to avoid shrinking and optimization altogether, since these steps could remove or modify parts of your code that are essential for later additions.
-dontusemixedcaseclassnames
-keeppackagenames
[package_filter]-flattenpackagehierarchy
[package_name]-repackageclasses
[package_name]Specifies to repackage all class files that are renamed, by moving them into the single given package. Without argument or with an empty string (''), the package is removed completely. This option overrides the -flattenpackagehierarchy
option. It is another example of further obfuscating package names. It can make the processed code even smaller and less comprehensible. Its deprecated name is -defaultpackage
. Only applicable when obfuscating.
Counter-indication: classes that look for resource files in their package directories will no longer work properly if they are moved elsewhere. When in doubt, just leave the packaging untouched by not using this option.
-keepattributes
[attribute_filter]-keepattributes
directives. The optional filter is a comma-separated list of attribute names that Java virtual machines and ProGuard support. Attribute names can contain ?, *, and ** wildcards, and they can be preceded by the ! negator. For example, you should at least keep the Exceptions
, InnerClasses
, and Signature
attributes when processing a library. You should also keep the SourceFile
and LineNumberTable
attributes for producing useful obfuscated stack traces. Finally, you may want to keep annotations if your code depends on them. Only applicable when obfuscating.-keepparameternames
Specifies to keep the parameter names and types of methods that are kept. This option actually keeps trimmed versions of the debugging attributes LocalVariableTable
and LocalVariableTypeTable
. It can be useful when processing a library. Some IDEs can use the information to assist developers who use the library, for example with tool tips or autocompletion. Only applicable when obfuscating.
When processing Kotlin metadata the Kotlin function, constructor and property setter parameter names are also kept.
-renamesourcefileattribute
[string]SourceFile
attributes (and SourceDir
attributes) of the class files. Note that the attribute has to be present to start with, so it also has to be preserved explicitly using the -keepattributes
directive. For example, you may want to have your processed libraries and applications produce useful obfuscated stack traces. Only applicable when obfuscating.-keepkotlinmetadata
-keep class kotlin.Metadata
instead. Specifies to process kotlin.Metadata
annotations if present. Currently only shrinking and obfuscation of its content is supported. Classes containing such annotations should be excuded from optimization if this option is enabled.-adaptclassstrings
[class_filter]-adaptresourcefilenames
[file_filter]-adaptresourcefilecontents
[file_filter]-dontpreverify
-microedition
-android
-verbose
-dontnote
[class_filter]-dontwarn
[class_filter]-ignorewarnings
-printconfiguration
[filename]-dump
[filename]-addconfigurationdebugging
ProGuard accepts a generalization of class paths to specify input files and output files. A class path consists of entries, separated by the traditional path separator (e.g. ':' on Unix, or ';' on Windows platforms). The order of the entries determines their priorities, in case of duplicates.
Each input entry can be:
The paths of directly specified class files and resource files is ignored, so class files should generally be part of a jar file, an aar file, a war file, an ear file, a zip file, or a directory. In addition, the paths of class files should not have any additional directory prefixes inside the archives or directories.
Each output entry can be:
When writing output entries, ProGuard generally packages the results in a sensible way, reconstructing the input entries as much as required. Writing everything to an output directory is the most straightforward option: the output directory will contain a complete reconstruction of the input entries. The packaging can be almost arbitrarily complex though: you could process an entire application, packaged in a zip file along with its documentation, writing it out as a zip file again. The Examples section shows a few ways to restructure output archives.
Files and directories can be specified as discussed in the section on file names below.
In addition, ProGuard provides the possibility to filter the class path entries and their contents, based on their full relative file names. Each class path entry can be followed by up to 8 types of file filters between parentheses, separated by semi-colons:
If fewer than 8 filters are specified, they are assumed to be the latter filters. Any empty filters are ignored. More formally, a filtered class path entry looks like this:
classpathentry([[[[[[[jmodfilter;]aarfilter;]apkfilter;]zipfilter;]earfilter;]warfilter;]jarfilter;]filefilter)
Square brackets "[]" mean that their contents are optional.
For example, "rt.jar(java/**.class,javax/**.class)
" matches all class files in the java
and javax
directories inside the rt
jar.
For example, "input.jar(!**.gif,images/**)
" matches all files in the images
directory inside the input
jar, except gif files.
The different filters are applied to all corresponding file types, irrespective of their nesting levels in the input; they are orthogonal.
For example, "input.war(lib/**.jar,support/**.jar;**.class,**.gif)
" only considers jar files in the lib
and support
directories in the input
war, not any other jar files. It then matches all class files and gif files that are encountered.
The filters allow for an almost infinite number of packaging and repackaging possibilities. The Examples section provides a few more examples for filtering input and output.
ProGuard accepts absolute paths and relative paths for the various file names and directory names. A relative path is interpreted as follows:
The names can contain Java system properties (or Ant properties, when using Ant), delimited by angular brackets, '<' and '>'. The properties are automatically replaced by their corresponding values.
For example, <java.home>/lib/rt.jar
is automatically expanded to something like /usr/local/java/jdk/jre/lib/rt.jar
. Similarly, <user.home>
is expanded to the user's home directory, and <user.dir>
is expanded to the current working directory.
Names with special characters like spaces and parentheses must be quoted with single or double quotes. Each file name in a list of names has to be quoted individually. Note that the quotes themselves may need to be escaped when used on the command line, to avoid them being gobbled by the shell.
For example, on the command line, you could use an option like '-injars "my program.jar":"/your directory/your program.jar"'
.
Like general filters, a file filter is a comma-separated list of file names that can contain wildcards. Only files with matching file names are read (in the case of input jars), or written (in the case of output jars). The following wildcards are supported:
Wildcard | Meaning |
---|---|
? | matches any single character in a file name. |
* | matches any part of a filename not containing the directory separator. |
** | matches any part of a filename, possibly containing any number of directory separators. |
For example, "java/**.class,javax/**.class
" matches all class files in the java
and javax
.
Furthermore, a file name can be preceded by an exclamation mark '!' to exclude the file name from further attempts to match with subsequent file names.
For example, "!**.gif,images/**
" matches all files in the images
directory, except gif files.
The Examples section provides a few more examples for filtering input and output.
ProGuard offers options with filters for many different aspects of the configuration: names of files, directories, classes, packages, attributes, optimizations, etc.
A filter is a list of comma-separated names that can contain wildcards. Only names that match an item on the list pass the filter. The supported wildcards depend on the type of names for which the filter is being used, but the following wildcards are typical:
Wildcard | Meaning |
---|---|
? | matches any single character in a name. |
* | matches any part of a name not containing the package separator or directory separator. |
** | matches any part of a name, possibly containing any number of package separators or directory separators. |
For example, "foo,*bar
" matches the name foo
and all names ending with bar
.
Furthermore, a name can be preceded by a negating exclamation mark '!' to exclude the name from further attempts to match with subsequent names. So, if a name matches an item in the filter, it is accepted or rejected right away, depending on whether the item has a negator. If the name doesn't match the item, it is tested against the next item, and so on. It if doesn't match any items, it is accepted or rejected, depending on the whether the last item has a negator or not.
For example, "!foobar,*bar
" matches all names ending with bar
, except foobar
.
Keep
Options¶The various -keep
options for shrinking and obfuscation may seem a bit confusing at first, but there's actually a pattern behind them. The following table summarizes how they are related:
Keep | From being removed or renamed | From being renamed |
---|---|---|
Classes and class members | -keep | -keepnames |
Class members only | -keepclassmembers | -keepclassmembernames |
Classes and class members, if class members present | -keepclasseswithmembers | -keepclasseswithmembernames |
Each of these -keep
options is of course followed by a specification of the classes and class members (fields and methods) to which it should be applied.
If you're not sure which option you need, you should probably simply use -keep
. It will make sure the specified classes and class members are not removed in the shrinking step, and not renamed in the obfuscation step.
includedescriptorclasses
includecode
allowshrinking
allowoptimization
allowobfuscation
A class specification is a template of classes and class members (fields and methods). It is used in the various -keep
options and in the -assumenosideeffects
option. The corresponding option is only applied to classes and class members that match the template.
The template was designed to look very Java-like, with some extensions for wildcards. To get a feel for the syntax, you should probably look at the examples, but this is an attempt at a complete formal definition:
[@annotationtype] [[!]public|final|abstract|@ ...] [!]interface|class|enum classname
[extends|implements [@annotationtype] classname]
[{
[@annotationtype]
[[!]public|private|protected|static|volatile|transient ...]
<fields> | (fieldtype fieldname [= values]);
[@annotationtype]
[[!]public|private|protected|static|synchronized|native|abstract|strictfp ...]
<methods> | <init>(argumenttype,...) | classname(argumenttype,...) | (returntype methodname(argumenttype,...) [return values]);
}]
Square brackets "[]" mean that their contents are optional. Ellipsis dots "..." mean that any number of the preceding items may be specified. A vertical bar "|" delimits two alternatives. Non-bold parentheses "()" just group parts of the specification that belong together. The indentation tries to clarify the intended meaning, but white-space is irrelevant in actual configuration files.
The class
keyword refers to any interface or class. The interface
keyword restricts matches to interface classes. The enum
keyword restricts matches to enumeration classes. Preceding the interface
or enum
keywords by a !
restricts matches to classes that are not interfaces or enumerations, respectively.
Every classname must be fully qualified, e.g. java.lang.String
. Inner classes are separated by a dollar sign "$
", e.g. java.lang.Thread$State
. Class names may be specified as regular expressions containing the following wildcards:
Wildcard | Meaning |
---|---|
? | matches any single character in a class name, but not the package separator. For example, "com.example.Test? " matches "com.example.Test1 " and "com.example.Test2 ", but not "com.example.Test12 ". |
* | matches any part of a class name not containing the package separator. For example, "com.example.*Test* " matches "com.example.Test " and "com.example.YourTestApplication ", but not "com.example.mysubpackage.MyTest ". Or, more generally, "com.example.* " matches all classes in "com.example ", but not in its subpackages. |
** | matches any part of a class name, possibly containing any number of package separators. For example, "**.Test " matches all Test classes in all packages except the root package. Or, "com.example.** " matches all classes in "com.example " and in its subpackages. |
<n> | matches the n'th matched wildcard in the same option. For example, "com.example.*Foo<1> " matches "com.example.BarFooBar ". |
For additional flexibility, class names can actually be comma-separated lists of class names, with optional !
negators, just like file name filters. This notation doesn't look very Java-like, so it should be used with moderation. For convenience and for backward compatibility, the class name *
refers to any class, irrespective of its package, when used on its own (e.g. -keep class *
).
The extends
and implements
specifications are typically used to restrict classes with wildcards. They are currently equivalent, specifying that only classes extending or implementing the given class (directly or indirectly) qualify. The given class itself is not included in this set. If required, it should be specified in a separate option.
The @
specifications can be used to restrict classes and class members to the ones that are annotated with the specified annotation types. An annotationtype is specified just like a classname.
Fields and methods are specified much like in Java, except that method argument lists don't contain argument names (just like in other tools like javadoc
and javap
). The specifications can also contain the following catch-all wildcards:
Wildcard | Meaning |
---|---|
<init> | matches any constructor. |
<fields> | matches any field. |
<methods> | matches any method. |
* | matches any field or method. |
Note that the above wildcards don't have return types. Only the <init>
wildcard has an argument list.
Fields and methods may also be specified using regular expressions. Names can contain the following wildcards:
Wildcard | Meaning |
---|---|
? | matches any single character in a method name. |
* | matches any part of a method name. |
<n> | matches the n'th matched wildcard in the same option. |
Types in descriptors can contain the following wildcards:
Wildcard | Meaning |
---|---|
% | matches any primitive type ("boolean ", "int ", etc) or "void " type. |
? | matches any single character in a class name. |
* | matches any part of a class name not containing the package separator. |
** | matches any part of a class name, possibly containing any number of package separators. |
*** | matches any type (primitive or non-primitive, array or non-array). |
... | matches any number of arguments of any type. |
<n> | matches the n'th matched wildcard in the same option. |
Note that the ?
, *
, and **
wildcards will never match primitive types. Furthermore, only the ***
wildcards will match array types of any dimension. For example, "** get*()
" matches "java.lang.Object getObject()
", but not "float getFloat()
", nor "java.lang.Object[] getObjects()
".
Constructors can also be specified using their short class names (without package) or using their full class names. As in the Java language, the constructor specification has an argument list, but no return type.
The class access modifiers and class member access modifiers are typically used to restrict wildcarded classes and class members. They specify that the corresponding access flags have to be set for the member to match. A preceding !
specifies that the corresponding access flag should be unset.
Combining multiple flags is allowed (e.g. public static
). It means that both access flags have to be set (e.g. public
and static
), except when they are conflicting, in which case at least one of them has to be set (e.g. at least public
or protected
).
ProGuard supports the additional modifiers synthetic
, bridge
, and varargs
, which may be set by compilers.
With the option -assumevalues
, fields and methods with primitive return types can have values or ranges of values. The assignment keyword is =
or return
, interchangeably. For example, "boolean flag = true;
" or "int method() return 5;
". Ranges of values are separated by ..
, for example, "int f = 100..200;
". A range includes its begin value and end value.