Use integrity and signing services to protect your app and your users

Google Play's integrity and signing services help you ensure that users experience your apps and games in the way that you intend. You can use the App integrity page (Release > App integrity) in Play Console to:

• Link your Google Cloud project to use the Play Integrity API to protect your apps and games from risky interactions
• Set up automatic integrity protection to prevent unauthorised modification and redistribution.
• Set up Play app signing to allow Google Play to manage your app signing key and use it to sign each release
• Turn on integrity checks for your Google Play store listing visibility so that unknown and untrustworthy devices that fail integrity checks can’t download your app from Google Play.

You can also quickly check the status of each of these services.

Overview

You can use the App integrity page (Release > App integrity) to manage and monitor all of Google Play’s integrity and signing services. Each service has information and resources to get started. After you turn on a service, you can configure it and access other features in its settings menu. If available, you’ll also start seeing reporting for the service.

Click on a section below to expand or collapse it.

Play Integrity API

Call the Integrity API at important moments in your app to check that it's your app binary, installed by Google Play, running on a genuine Android device. Your app's backend server can decide what to do next to prevent abuse, unauthorised access and attacks. After integrating the Integrity API, you can monitor your app's API requests and analyse verdicts via reports generated by your install base.

Get started with the following resources:

• View the Play Integrity API documentation on the Android Developers website.
• Learn more about using the Play Integrity API in Play Console.

Automatic integrity protection

Use Google Play’s automatic integrity protection to protect your apps and games against integrity abuse in the form of unauthorised modification and redistribution. Automatic integrity protection works in your app without a data connection. It can be turned on with one click in the Play Console and requires no developer work before testing and no backend server integration.

Learn more about automatic integrity protection.

Play app signing

Use Play app signing to allow Google Play to manage and protect your app signing key and use it to sign each release. This makes sure that any updates are from you.

Learn more about using Play app signing.

Store listing visibility

Note: Store listing visibility integrity checks were previously the Play Integrity device exclusion rule in the Device catalogue (Reach and devices > Device catalogue). We renamed the feature and relocated it to the App integrity page to make it easier to find and more convenient to use. 

Turn on integrity checks for your store listing so that Google Play can check that devices pass integrity checks before making your store listing visible to users. 

Tips:

• This service does not require you to integrate the Play Integrity API in your app. The Play Store app obtains a device verdict on the device itself and uses it to determine store listing visibility.
• By turning on integrity checks, you can reduce your app’s availability to risky devices such as rooted or compromised devices, emulators and unknown environments. 
• You can find the definitions for each integrity check in the Play Integrity API documentation. 
• This does not prevent users from obtaining your app another way such as through another distribution channel or via sideloading, so consider using runtime protection as well as the Play Integrity API or automatic integrity protection. 

To use integrity checks:

1. Open Play Console and go to the the App integrity page (Release > App integrity)
2. Go to the 'Store listing visibility' section.
3. Choose whether you want to turn on integrity checks for your Google Play store listing. Unknown and untrustworthy devices that fail integrity checks will not be able to install your app from Google Play:
   • No integrity checks: Your store listing will be visible to all devices that you support.
   • Basic integrity checks: Your store listing will be visible to all devices that you support that meet basic integrity checks.
   • Device integrity checks: Your store listing will be visible to all devices that you support that meet device integrity checks.
   • Strong integrity checks: Your store listing will be visible to all devices that you support that meet strong integrity checks.
4. Save your changes.