Android build and signing in React Native - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of signing an Android app?

Signing an Android app ensures the app's authenticity and integrity. It confirms the app comes from the developer and has not been tampered with.

beginner

What file format is used for the Android app signing key?

The signing key is stored in a .keystore or .jks file, which contains the private key used to sign the app.

intermediate

What command is used to generate a signing key for Android apps?

You use the keytool command from the Java SDK to generate a signing key, for example: keytool -genkeypair -v -keystore my-release-key.keystore -alias my-key-alias -keyalg RSA -keysize 2048 -validity 10000.

intermediate

In React Native, where do you configure the signing information for Android release builds?

You configure signing info in the android/app/build.gradle file under the signingConfigs section, specifying the keystore path, alias, and passwords.

beginner

What is the difference between a debug build and a release build in Android?

A debug build is unsigned or signed with a debug key and used for testing. A release build is signed with your private key and optimized for publishing to users.

Which file contains the private key used to sign an Android app?

A .keystore

B .apk

C .gradle

D .json

The .keystore file stores the private key used for signing Android apps.

What tool is commonly used to generate a signing key for Android apps?

A keytool

B adb

C npm

D gradle

The keytool command from the Java SDK is used to create signing keys.

Where do you specify signing configs in a React Native Android project?

A package.json

B android/settings.gradle

C index.js

D android/app/build.gradle

Signing configs are set in android/app/build.gradle under signingConfigs.

What is the main reason to sign an Android app before release?

A To add animations

B To verify the app's source and integrity

C To enable debugging

D To reduce app size

Signing confirms the app is from the developer and not altered.

Which build type is optimized and signed for publishing to users?

A Debug build

B Test build

C Release build

D Snapshot build

Release builds are signed with your private key and optimized for users.

Explain the steps to generate and configure a signing key for an Android React Native app.

Think about creating the key, saving it, and telling your app where to find it.

Why is it important to keep your Android app signing key secure and private?

Consider what happens if someone else gets your key.