From APK to AAB

  1. Backup your old keystore

  2. Delete the current keystore
    This forces App Inventor to generate a completely new keystore for your project.

  3. Build a new AAB (upload it to Google Play later)
    App Inventor will now automatically create a new keystore and sign the AAB with it.

  4. In Google Play Console: go to App Signing
    Google Play Console → Your App → Setup → App Integrity → App Signing
    Here you will see two keys:

  • App signing key (stored by Google)
  • Upload key (the one you must use for uploads)
    Because you deleted your old keystore, you now need to register the new upload key.
  1. Request Google to reset your upload key
    On the App Signing page, click:
    Request upload key reset (or reset upload key)
    Then Google will ask you to provide:
    The certificate (public key) generated from your new keystore

  2. Generate the certificate from your new keystore
    Open a terminal/command prompt in the folder where the new keystore is located, then run:

keytool -export -rfc -alias androidkey -file upload_certificate.pem -keystore android.keystore

Enter the password (default App Inventor keystore password = "android").
This will produce the file: upload_certificate.pem. This is the file Google needs.

  1. Upload the certificate to Google Play
    Return to Google Play → App Integrity → App Signing → Upload your certificate
    Upload the file: upload_certificate.pem

Google will then process your upload key reset (usually takes a few hours/days).


Subject: Request to reset upload key

Hello Google Play team,

I am enrolled in Play App Signing and accidentally signed my recent build with the app signing key. Because of this, I can’t upload a new release.

Please reset my upload key.

Attached is the certificate (upload_certificate.pem ) for my new upload key, which was automatically generated by App Inventor.

App package name:
appinventor.ai_<email>.appName

Thank you!