Is it okay to sign two different applications with the same key?

Please sign your apps with the same certificate only in case you need to share data, or other resources. Some disadvantages of signing with the same certificate:

  1. If your app certificate is compromised, all your apps are in danger. Certificate holder can create fake updates for your apps to steal users data etc.

  2. If you wanna sell one of your apps, you have to compromise your certificate to the buyer.

  3. If you lose your certificate, you will be unable to make updates for all your apps. You will be forced to create new packages (new apps) for all of them.

  4. If one of your apps has signature level permission, or allows user id sharing, all your apps can take advantage of this!

Happy signing!

Leave a Comment

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)