Documentation

With Play App Signing, Google manages and protects your app's signing key for you and uses it to sign your APKs/AABs for distribution. It’s a secure way to store your app signing key that helps protect you if your key is ever lost or compromised.

When you use Play App Signing, your keys are stored on the same infrastructure that Google uses to store its own keys. Keys are protected by Google’s Key Management Service.

With Google Play App Signing, you can securely manage your app signing keys for new or existing apps. Keys are stored on the same secure infrastructure Google uses to store its own keys.

If you lose your keystore or think it may be compromised, Google Play App Signing makes it possible to request a reset to your upload key. If you're not enrolled in Google Play App Signing and lose your keystore, you'll need to publish a new app with a new package name..

1. Open Play Console.
2. Select your app.
3. On the left menu, go to Release > Setup > App integrity.

Google Play App Signing will be activated by default for a new app.

If you select Manage app signing, you'll see a number of signing preferences. It is recommended to use the default option: Let Google manage and protect your app signing key.