← All features
Bundle signing
Verify every over-the-air update with bundle signing
Bundle signing gives a device cryptographic proof that a release was produced by an authorized key. The private key remains in your control; the SDK verifies every signed bundle before it can be installed.
ECDSA P-256 signatures verified on device
Private signing key stays out of NitroPush
Rejects tampered or unsigned release payloads
How it works
01
Register the public key
Configure the project with the public half of an ECDSA P-256 keypair.
02
Sign at upload time
Pass a private-key file to the release upload command in local development or CI.
03
Verify before activation
The SDK uses the configured public key to validate the bundle before it is installed.
Related resources