Skip to content

Play signing: Google-generated signing key, our key as upload key - #258

Merged
bubulux merged 1 commit into
mainfrom
docs/play-signing
Oct 23, 2026
Merged

bubulux merged 1 commit into
mainfrom
docs/play-signing

Conversation

@bubulux

@bubulux bubulux commented Oct 23, 2026

Copy link
Copy Markdown
Collaborator

Part of OpenClapper-dev/deploy#9. A docs-only change to the Play Store section of self-hosting.md, after a decision on 2026-10-23.

  • Signing: Google generates each app's signing key, and the deployment's key becomes the upload key. The reason: a lost upload key can be reset through Google, while a lost signing key cannot be replaced. The cost is spelled out: a sideloaded APK and the Play install cannot update each other. PEPK is mentioned as the alternative.
  • First release: keep "Google-generated key". The first bundle registers its key as the upload key.

Checked: the doc renders. Nothing else changes, because the workflow already signs bundles with the environment's key.

🤖 Generated with Claude Code

…as upload key (OpenClapper-dev/deploy#9)

Decided 2026-10-23: a lost upload key can be reset through Google, a lost app signing key cannot.
The trade-off, that a sideloaded APK and the Play install no longer update each other, is spelled
out in the Play Store section.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@bubulux
bubulux merged commit 6ae357a into main Oct 23, 2026
5 checks passed
@bubulux
bubulux deleted the docs/play-signing branch October 23, 2026 11:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant