I am trying to setup signing process so that keystore, password, and key password **are not** stored in the project&#39;s `build.gradle` file.

Currently I have the following in the `build.gradle`:

```groovy
android {
    ...
    signingConfigs {
        release {
            storeFile file(&quot;my.keystore&quot;)
            storePassword &quot;store_password&quot;
            keyAlias &quot;my_key_alias&quot;
            keyPassword &quot;key_password&quot;
        }
    }

    buildTypes {
        release {
            signingConfig signingConfigs.release            
        }
    }
}
```

It works perfectly fine but I **must not** put the values for the `storePassword`, and `keyPassword` in my repository. I would prefer to not put `storeFile` and `keyAlias` there either.

Is there a way to alter the `build.gradle` so that it will obtain passwords from some external source (like a file that resides on my computer only)? 

And of course, the altered `build.gradle` should be usable on any other computer (even if the computer doesn&#39;t have access to passwords). 

I am using Android Studio and in Mac OS X Maverics if it does matter.

All Apk Signing Solutions on Gang of Coders

Total of 1 Apk Signing Solutions

Sign APK without putting keystore info in build.gradle