Google Play Console 新的应用签名流程：我们每次发布应用时都需要 .pepk 和 .keystore 文件吗？

Question

I am planning to upload a brand new app to the Google Play Store.

I have followed this link to generate .aab file. https://developer.android.com/studio/publish/app-signing#sign_release

.pepk, KeyStore, .aab files generated.

Now I have selected the first option("Let Google manage and protect your app signing key") in Google Play Console for the app signing and uploaded the .aab file.

I am not sure whether this is the correct way of uploading the .aab file because it never asked me to upload the .pepk file. However .aab file uploaded successfully.

I guess I don't need to generate .pepk file from Android Studio if I go with the option "Let Google manage and protect your app signing key"

So hereafter do I need to use both .pepk and .keystore files to sign the .aab file? What happens if I lose any of the two or both?

Answer 1

The .pepk file is only needed when you are already publishing an app and had initially opted out of Play Signing. This is the way to securely transfer your app signing key to Google.

If you're creating a new app, you don't need this file, you can enroll in Play Signing immediately selecting the first option "Let Google manage and protect app signing key (Recommended)" and Play will generate the app signing key for you. If you want to also keep a hold of the private key, you can use the option "Export and upload a key from Java keystore" which will give you the tool and commands to run (unfortunately, the .pepk file cannot be used in this flow the moment).