APK & App Bundles
Decompile and Recompile an APK: A Controlled Lab Workflow
Decompiling and recompiling an APK is a laboratory workflow, not a way to preserve the original release automatically.
4 min read
APKLint / Engineering notebook
Android engineering guides.
Page 2 of 11.
Practical guides to Android packages, signing, security and release decisions. Start with the problem, inspect the evidence, and follow the relevant tool or official reference.
262 focused guides61 free toolsReference review: 22 Sep 2026
Showing 25–48 of 262 guides · Page 2 of 11.
APK & App Bundles
Android Multidex: When You Need It and When You Do Not
Android multidex addresses the method-reference limit of a single DEX file.
4 min read
APK & App Bundles
MultiDexApplication vs MultiDex.install: Fixing Startup on Older Android
MultiDexApplication and MultiDex.install() solve the same legacy startup problem through different integration points.
3 min read
APK & App Bundles
versionCode vs versionName: Preventing Play Upload and Update Errors
versionCode controls Android release ordering; versionName is a display label.
4 min read
Signing & App Identity
App Bundle Signed with the Wrong Key: Diagnose First
Resolve a wrong App Bundle signing-key error by comparing the expected upload certificate with the submitted build and CI configuration.
4 min read
Signing & App Identity
Generate a Signed APK in Android Studio and Verify It
Generating a signed APK requires choosing the correct application module, release variant and signing identity.
4 min read
Signing & App Identity
Android Debug Keystore Password: Defaults and Safe Use
The standard Android debug keystore uses the password android , the key password android and the alias androiddebugkey .
4 min read
Signing & App Identity
Find Your Android Signing Keystore the Safe Way
There is no universal folder for an Android release keystore.
4 min read
Signing & App Identity
Create an Android Signing Keystore with a Recovery Plan
Create an Android signing keystore only after deciding whether it will be an upload key or the actual app-signing identity.
4 min read
Signing & App Identity
Android Keystore Password vs Key Password vs Alias
An Android signing setup can involve a keystore password, a key-entry password and an alias. These values are related but not interchangeable.
4 min read
Signing & App Identity
Play App Signing: Signing Keys, Upload Keys, Certificates
Play App Signing separates the key used to upload a release from the key used to sign APKs delivered to users.
4 min read
Signing & App Identity
Verify an APK Signature with apksigner, Not Just a Viewer
To verify an APK signature, use a tool that validates the signed package, such as Android's apksigner .
3 min read
Signing & App Identity
Find SHA-1 and SHA-256 Fingerprints for the Right Build
An Android certificate fingerprint identifies a signing certificate using a hash algorithm.
3 min read
Signing & App Identity
APK Signing Schemes v1, v2, v3 and v4: What Each Adds
APK signing schemes describe how Android verifies package integrity and signing identity. They are not a simple “higher number means this app is safe” score.
4 min read
Signing & App Identity
Reset a Lost Play Upload Key Without Replacing App Identity
A lost Google Play upload key can often be reset through Play App Signing without changing the app-signing identity delivered to users.
4 min read
Signing & App Identity
Android Signing-Key Rotation: Plan Before Upgrading
Signing-key rotation is a planned identity transition, not simply replacing a keystore file.
3 min read
Signing & App Identity
Keep Android Signing Credentials Out of Gradle Repositories
Android release signing in CI should provide the build with the minimum credentials it needs without placing private keys or passwords in the repository.
4 min read
Signing & App Identity
Android Keystore API vs Signing Keystore: Two Systems
Android Keystore API and an Android signing keystore are different systems. The runtime Keystore protects cryptographic keys used by an installed app.
4 min read
Signing & App Identity
Store Secrets with Android Keystore: Encrypt Data, Do Not Store Passwords as Keys
Android Keystore stores cryptographic keys, not arbitrary passwords as a general-purpose database.
4 min read
Signing & App Identity
Hardware-Backed Keystore: Verify Support, Don't Assume
A key generated through Android Keystore is not automatically guaranteed to be protected by the strongest hardware available on every device.
4 min read
Signing & App Identity
Configure a React Native Android Release Keystore Correctly
A React Native Android release uses Android's signing system.
3 min read
Signing & App Identity
Fix INSTALL_FAILED_UPDATE_INCOMPATIBLE Safely
Investigate INSTALL_FAILED_UPDATE_INCOMPATIBLE by comparing the installed and candidate app identities, signing records and release paths.
3 min read
Signing & App Identity
zipalign Before Signing: Verify Alignment Without Invalidating an APK
Run zipalign before the final apksigner step.
3 min read
Signing & App Identity
Package Name vs applicationId: Which Identity Does Google Play Use?
An Android application's applicationId is its installed and Google Play identity. The code namespace organizes generated and source references.
3 min read
Guides are dated references, not a live view of your app or Console. Verify changing policy and SDK details before release.
APKLint is independent and is not affiliated with Google, Android or the other projects discussed.