Signing keys, right on your phone
KeyStoreGen
Creates Android app signing keys on your phone and gets them safely where they belong – into GitHub secrets, Bitwarden or onto your computer.
- Status
- Beta
- Requires
- Android 10 or newer
- Package name
- dev.eno2.keystoregen
Features
What KeyStoreGen can do
Create or import keys
RSA 4096/3072/2048 or EC P-256 as a PKCS#12 keystore – or take over an existing .jks/.p12 or a Bitwarden export byte for byte.
GitHub secrets in one tap
Sign in with GitHub’s device flow, pick a repository, set all four secrets. Values are encrypted on the phone with the repository’s public key (libsodium sealed box).
Straight into Bitwarden
As a secure note in your vault (bitwarden.com, bitwarden.eu or self-hosted) or as a password-protected export file.
Fingerprints at hand
SHA-256 and SHA-1 for Firebase, Google Sign-In and the Play Console.
Confirmed biometrically
Every upload is confirmed with fingerprint, face or screen lock. Screenshots are blocked while secrets are on screen.
Setup guide included
Built-in guide with ready-to-copy keytool, workflow and Gradle snippets.
Background
About KeyStoreGen
Every Android app needs a signing key – and if you lose it, you can never again publish an update that installs over the old app. KeyStoreGen creates the key just like keytool -genkeypair, right on your phone, and makes sure it ends up safely where it is needed – in your CI secrets, in your password manager and, if you like, on your computer.
Nothing leaves the phone unless you save, copy or upload it yourself. Copied values are marked as sensitive so they don’t show up in clipboard previews.