Play App Signing Key Mismatch: How to Reset or Fix Android Keystore Upload Keys
When uploading a new release to Google Play Console, seeing the error 'Your Android App Bundle is signed with the wrong key' can completely stall your release pipeline. Understanding how Google Play App Signing separates upload keys from distribution keys is the key to fixing this.
Upload Key vs App Signing Key
With Google Play App Signing, you sign your AAB with an 'Upload Key'. Google then strips your upload signature, verifies it, and re-signs the final APK with your permanent 'App Signing Key' before delivering it to Android users.
How to Reset a Lost or Corrupted Upload Key
- Generate a new keystore and private key using keytool or Android Studio.
- Export the certificate for the new key in PEM format (keytool -export -rfc -keystore upload.keystore -alias upload -file upload_certificate.pem).
- Go to Google Play Console > Release > Setup > App signing.
- Click 'Request upload key reset' and upload the generated .pem certificate.
- Google support will verify and activate the new key within 24 to 48 hours.
Never delete your upload keystore without keeping encrypted backups in secure storage like 1Password or AWS Secrets Manager.
CloseTesting Review Team
Official guide by the CloseTesting editorial team. Helping Android developers meet Google Play requirements with 12 real testers for 14 continuous days.
Learn more about CloseTesting →Need 12 Real Testers for Your Android App?
Get 12 verified human testers on real Android devices. Pass the 14-day testing requirement on your first attempt with daily active tracking and zero risk.