Lost Your Upload Key? How Play App Signing Saves You
With Play App Signing you are not locked out if you lose your upload key. How to request an upload key reset, how long it takes, and how to avoid it next time.
Short answer
If your app uses Play App Signing (the default for new apps), you’re not locked out. Google’s help says that if you lose your upload key or suspect it was compromised, you can create a new one and request an upload key reset in Play Console. Your app signing key, held by Google, doesn’t change.
Two keys, two jobs
| Key | Who holds it | What it does |
|---|---|---|
| App signing key | Google (with Play App Signing) | Signs the APKs users install. Never changes for your app. |
| Upload key | You | Signs the bundles you upload so Google knows they came from you. Can be reset. |
Because Google holds the app signing key, losing your upload key is recoverable.
How to request a reset
- Generate a new upload key (a new keystore in Android Studio or with keytool).
- Export its certificate as a PEM file.
- In Play Console go to your app → Test and release → App integrity → Play app signing (labels can vary slightly).
- Choose the option to request an upload key reset, pick a reason, and upload the PEM file.
- Wait for Google to process it, then sign new uploads with the new key.
The steps above follow Google’s Play App Signing help page. The exact menu path changes from time to time.
Does this affect your closed test?
The reset doesn’t touch your testers or their opt-in status. While you wait, you can’t upload new builds, so ship urgent fixes to testers after the reset is done. Your 14 days keep counting regardless.
Avoid it next time
- Back up the keystore file and passwords in a password manager, plus one offline copy.
- Don’t keep the only copy inside the project folder or a CI cache.
- If you used a framework tool (Expo EAS, Codemagic, Unity), check whether it stores the upload key for you, and download a copy.
Frequently asked questions
What if I lost the app signing key on an old app without Play App Signing?
That’s a much harder situation, because updates must be signed with the original key. Check Play Console for your app’s signing setup and Google’s help on recovery options.
How long does an upload key reset take?
Google processes it after your request. Plan for some wait and avoid needing urgent uploads in the meantime.
Sources and how we keep this accurate
Policy facts are checked against Google's own documentation on the date shown above. Google can change requirements at any time, so confirm in your Play Console. Where we give advice or estimates rather than Google's rules, we say so. TestersZone is independent and not affiliated with Google. Drafts are AI-assisted and reviewed by our team.
Need 12 testers? Get them free.
Test 3 apps, earn 60 credits, and list your app for up to 20 real testers with verified daily check-ins.
Start freeKeep reading
How to Upload Your First App Bundle to Play Console
How to Generate a Signed App Bundle in Android Studio
AAB vs APK: What Google Play Needs and Why
Can You Delete or Pause a Closed Testing Track?
Should You Keep Your Closed Test Running After Launch?
Can You Change Your Package Name After Closed Testing?
Browse all answers, or see the quick answers, guides and comparisons.