Sharing my Android keystore with a client

Question

I developed applications for different clients, but I used the same keystore for all these applications. One of my clients wants to update the application in the game store, and he wants to do it on his own. Therefore, he asks me to share his keystore. This is due to the fact that he does not want to lose ratings, etc. Associated with the application.

Since I have the same repository for all my applications, I am a little reluctant to do this. Can someone please offer me a solution that works well for both of us.

Answer 1

Personal tip: DO NOT share the keystore with anyone

In addition, you can send an apk message to the client, sign it and send it back. If you do not want to do this, you will need to share the keystore in order to arrive at a friendly solution.

You can try to explain to the customer the security risk that they pose and see if they agree to re-publish this application before even more ratings and downloads are reached.

In addition, you should always create a new keystore for each individual client (or even individual applications).