The Play Integrity API offers a field called nonce, which can be used to further protect your app against certain attacks, such as replay attacks, and person-in-the-middle (PITM) tampering attacks. The Play Integrity API returns the value you set in this field, inside the signed integrity response.