How to change the key used to sign an Android application that is already in the play store?

Question

In the event of a security breach, if an attacker manages to make a copy of the key used to sign the application (as well as the password), then how to cancel the key and assign a new one?

Is it possible (to cancel the key)?

Answer 1

This is a really good question. Google just says that you need to save the key correctly.

If you need to re-sign your apk file with a different key, there will be no other solution:

• Unpublish application
• use the new package name
• and new key
• publish a new application

I also do not like this solution, but as far as I know, it is the only one. I had the same problem a few months ago.