Ok folks.. long story short, I was developing on a computer that I no longer have access to. I was able to retrieve the source code, but not the .keystore file used to sign and publish my application to the market (with several updates). Am I, and my poor users, out of luck if I ever want to update?
I know the password used to sign the key (at least it is one of three it could be), so can I create another? There must be a way around this.. what about a hard drive fail?
No need to Remove Your app from play Store You can Update Your app. it’s Possible now, After May 2017 you can Update your app if you lost your keystore or keystore password. Don’t lose Hope you can update your app using new Keystore file please refer this blog new keystore update on playstore here i wrote how to update apk if you lost your keystore follow the step and create new keystore , I updated my app using this step. you need to enable google play app signing on play store console
Now it is possible don't worry, here is the full and final steps to reset .JKS file.
Step-1
Download the UPLOAD CERTIFICATE (file name - upload_cert.der) from your Google Play Store Console
Step-2
Go to this LINK https://support.google.com/googleplay/android-developer/contact/otherbugs And fill the application form with your valid Email ID and upload the file (upload_cert.der).
Step-3
Now you will get the Email from support team, and they don't need your .JKS file but .PEM file here is the email Sample.
Step-4
to convert .JKS file to .PEM file you just have to download KeyStore Explorer
After replying the Mail, wait for 48 to 72 hours your keystore fill will reset.
If you know your keystore password, you still don't have the associated private key to sign your app. You also have no chance to generate the same private key which corresponds to your public key.
Therefore: Always backup your keystore file. It's as important as your source code.
From long days, I also search a solution for that, but not successfully till now. If you have the last version of your app apk, then you can retrieve certificates from that by using the jarsigner cmd command. But you need a private key for update. Google Play did not provide any relaxation for that.
Until today, losing your key would make it impossible to update your app with a new version. In such cases, the only solution was to publish a new app, with a new package name and key, and ask all of your users to install it.
Starting from today, the app signing key in the Play Console is now securely managed by Google Play meaning that you are only responsible for managing your upload key. If your upload key is compromised or lost, Google's developer operations team can assist by verifying your identity and resetting your upload key. Google will still re-sign with the same app signing key, allowing the app to update as usual.
For existing apps, it requires transferring your app signing key to Google Play. For new apps, Google can generate your app signing key. Once enrolled in app signing, you sign your APK with an upload key, which Google uses to authenticate your identity. They'll then strip that signature and re-sign your app with the app signing key.
Reference: Play Console Help > Manage your app signing keys
Yes, you can release an update to existing app with a new key!
Google now allows you to upload the new key to existing app by requesting them to reset it through email/live chat in Google Support.
This process takes 1-2 business days.
I followed this process and uploaded an update to the same app with a new key. Google Play Store technical team helped me to reset the previous key.