What's the best and safest way to store app API keys?

Which option is most secure for storing API keys? Constants? App State Variables? etc