If this is a concern you might take a look at storing the secrets with keepass and keepass2android. It will keep them encrypted and let you generate them throu

If this is a concern you might take a look at storing the secrets with keepass and keepass2android. It will keep them encrypted and let you generate them through the app once you've entered everything in (and can be configured to lock everything down again immediately). There's still other possible attacks but it should at least be as secure as your password on your database while not in use.