Sign APK without putting keystore info in build.gradle

SeparateSigningConfig.md

Sign an APK without putting keystore info in your build.gradle file

1. Add the following code to your build.gradle file.

// Load keystore
def keystorePropertiesFile = rootProject.file("keystore.properties")
def keystoreProperties = new Properties()
keystoreProperties.load(new FileInputStream(keystorePropertiesFile))

android {
    ...
    signingConfigs {
        release {
            keyAlias keystoreProperties['keyAlias']
            keyPassword keystoreProperties['keyPassword']
            storeFile file(keystoreProperties['storeFile'])
            storePassword keystoreProperties['storePassword']
        }
    }
    ...
}

2. Create a file called keystore.properties in the root directory of your project:

keyAlias=my_key_alias
keyPassword=key_password
storeFile=C:/Users/escape\ spaces\ like\ this/Path/To/My/Keystore.jks
storePassword=keystore_password

3. Add the following line to your .gitignore file.

keystore.properties