Enroll in Google Play App Signing to secure your app keys

Android Developers · 119K views · 2017 · 3:05

Open on YouTube

Software practice, open source & careersSecurity & hackingexplainerdated

Why Stack Overflow recommends it

Stack Overflow users link it as the official walkthrough when answering questions about Google Play App Signing, upload keys, and migrating an existing app's keystore.

Recommended by 1 people across 1 different months, 2018 to 2018.

What it is

A short Android Developers video announcing Google Play App Signing. It explains that developers sign uploads with an upload key while Google holds and re-signs with the actual app signing key, which helps if a key is lost or compromised. It covers enrolling both existing apps and new apps.

What people said

Recommends Prashant · 2018-03 · Stack Overflow · on “Google Play App Signing enabled does my first apk singing key is now my upload key?”

I have enabled "Google Play App Signing". It shows enabled on the console. As I am going for new app Google has generated the App signing key. For upload key I am getting the following message : **Upload certificate** Your app doesn’t have an upload certificate yet. The certificate you use to sign your first APK will be used as the upload certificate. [LINK] I followed Apk signing process as here. [LINK] So the signing key I use to sign my first apk will become my default upload key? Update It appears the key we use to sign the first apk will be taken as upload key. The main app signing key is already at play store when I enrolled for Goole play App Signing . I created one keystore file as m

Cites Pragati Singh · 2018-02 · Stack Overflow · on “I tried to upload my instant app apks to Play store, it gives the following error”

Can you check Manage your app signing keys [LINK] , you need to use the fingerprint provided by the Play Console [LINK] ,instead of the fingerprint used by Android Studio to sign the APK with (upload key). Step 1: Create an upload key Step 2: Prepare your release 1. Go to your Play Console. 2. Select an app. 3. On the left menu, select Release management > App releases. 4. Next to "Google Play App Signing," select Accept. Step 3: Upload your signed app Step 4: Register your app signing key with API providers Reference:- Enroll for app signing in the Google Play Console & secure your app using Google’s robust security infrastructure [LINK] [this video]

Cites Morrison Chang · 2018-12 · Stack Overflow · on “Create new keystore for new application release”

If *YOU* created a new keystore for a new app you have to follow the steps for Google Play App Signing [this video] as if you are migrating an existing app to App Signing. The alternate is to the use the key Google Play generates to sign your app for upload.