Android signing

What you need

A Java keystore (.jks or .keystore) along with its store password, key alias, and key password.

Uploading your keystore

From the project's Secrets screen, upload the keystore file and its credentials once — encrypted at rest the same way as your iOS secrets. See Secret Vault.

Staging vs. production

Staging Android builds are unsigned debug builds — no secrets requested at all, so you can test a project before ever touching the Vault. Production builds request your keystore and produce a signed .aab, ready to upload to Google Play, gated by plan — see plans & limits.

If you lose your keystore

A Google Play listing is tied to the keystore that signed its first release — losing it means you can't publish an update under that same listing ever again. pkgr.app stores your keystore encrypted for signing builds, but it isn't a backup service: keep your own secure copy too.