APK Signing Keys, Backups, and App Updates
For a normal app update, keep the same Android package identity and signing key, and increase the version code.
Updated · About these guides
Create and protect your key
The key is created in your browser. Choose a password of at least 10 characters, download its encrypted backup, and keep the password somewhere separate. The current importer accepts Web2Apk encrypted key backups, not JKS or P12.
Unlock a saved key
Open Build and enter its password to unlock the encrypted backup stored in this browser. If you changed devices, import the key backup or a project backup that contains it. A project export includes only the encrypted key, never its password.
Make an update
Keep the package name unchanged, restore the original signing key, save your changes, and build. Version codes are tracked locally across projects with the same package name. If your backup is old or you released builds elsewhere, set the minimum version code above the latest published value.
Changing identity
A different package name creates a separate app. A different signing key with the same package name does not normally update the installed app. Uninstalling can remove the app's saved data. Store-managed signing and key-upgrade processes have separate rules.
Backups and build snapshots
Each build uses a fixed saved configuration. Later edits do not modify older packages. Export project backups before clearing browser data. Workspace backups do not contain historical APK/AAB binaries, so download those separately.
What changes when you release an update?
| Change | Expected effect |
|---|---|
| Same package and key; higher version code | The normal update path for your directly distributed APK. Test over the previous installed build. |
| Different package name | A separate app identity; it does not replace the old app. |
| Different key, same package name | Normally rejected as an update to the old app. Store-managed key changes have their own process. |
| New icon, HTML, or navigation | Save and build a new package; old downloaded packages keep their original configuration. |
| Changed content at the same hosted URL | The live site can update independently of the installed wrapper. |
Checklist
- Download the current project backup and encrypted signing-key backup.
- Keep the password separately; support cannot recover it.
- Confirm the package name and last distributed version code.
- If restoring an old backup, set the minimum version code above the last release.
- Install the new APK over the old APK on a test device before distributing it.
Official references
Use these primary sources for platform details and current requirements.