Sharing my Android keystore with a client [closed]

Question

I have developed apps for different clients, but I have been using the same keystore across all these apps. One of my client wants to update an app on the playstore and he wants to do it on his own. So, he is asking me to share my keystore. This is because he does not want to lose the ratings etc. associated with the app.

As I have the same keystore across all my apps, I am a bit reluctant to do this. Can someone please suggest me a solution that works out well for both of us.

Answer 1

Personal Piece of Advice: Do NOT share your keystore with anyone

Other than that, you could have the client send you the apk, sign it, and send it back to him. If you don't want to do that, you will have to share the keystore to come to an amicable solution.

You could try to explain to the client the security risk it poses, and see if they agree to republish the app before even more ratings and downloads happen.

Additionally, you should always create a new keystore for each individual client (or even individual apps).