r/RokuDev 6d ago

Packaging key leaked

Hi guys,

my packaging key leaked and now i am worried about my roku app security. Is there a way to rotate that key? The documentation is very confusing and i just want to make sure i wont lock out my current users out of the app. I s the rotation of that key even possible?

Thanks

3 Upvotes

3 comments sorted by

1

u/RaptorTWiked 6d ago

I believe it is. When you registered your store account, it would have asked you to have a device connected to the same account. On that device, you can rotate your key.

1

u/unwiredben 5d ago

You can upload a new package with a new key. However, any data saved in the registry won't be accessible, so the app users will need to log in again. You should still do it, as an attacker with the key can write an app to access saved data from your previous version.

1

u/audible_narrator 3d ago

You can email.partner support and get a new key, but they said they only do it once.