I want to include a secret key into an iOS app so that the app can \"prove\" to a certain server that a request is coming from the app itself and not some other system. I k
I agree with @Nubis that there is no 100% bulletproof way to do it.
However, this library seems like a pragmatic solution to the problem:
https://github.com/UrbanApps/UAObfuscatedString
It probably won't save you from a highly motivated attacker, but it won't make their life easy.