Short answer
Sign the bundle with the upload key Play Console expects. Compare the upload key certificate on the Play app signing page in Play Console with your keystores to find the right one. If it’s lost, create a new upload key, export its certificate, and request an upload key reset in Play Console. Google keeps the app signing key, so users keep getting updates.
Why the key doesn’t match
01
The build used a different keystore
“You use this key to sign your app bundle before uploading it to the Play Console. Google uses it to verify your identity.” Google, Use Play App Signing
A new machine, a debug key, or a builder such as FlutterFlow, Expo EAS or Codemagic that generated its own keystore all produce a bundle Google won’t accept. Match the fingerprint before reaching for a reset.
02
The upload key is lost
“If you lose your upload key or suspect that it was compromised, you are not locked out of your app.” Google, Use Play App Signing
Ask Google for an upload key reset. Create the new upload key in Android Studio, export its certificate to PEM, then request the reset on the Play app signing page and upload the certificate.
keytool -export -rfc -keystore upload-keystore.jks -alias upload -file upload_certificate.pem03
The app signing key is yours, and lost
“This key cannot be reset if you manage it yourself and lose it.” Google, Use Play App Signing
If the app predates Play App Signing and you kept the app signing key yourself, Google can’t reset it. Check the Play app signing page in Play Console to see whether Google holds the key.
Checked against the vendor’s docs on : Play Console Help: Use Play App Signing.
Rather hand it over?
Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.
Related: Google Play version code already used · Expo EAS Build failed · Firebase Google sign-in DEVELOPER_ERROR on Android · Google Play Data safety form rejected