What is Android.PUA.DebugKey? Is it a virus?

What is Android.PUA.DebugKey?

All APK files must be signed before they can be installed and used. The signature is intended to verify the integrity of an APK file. Editing Android apps breaks that signature, and it needs to be re-signed.

Android.PUA.DebugKey is a warning that occurs when the application is signed with a debug signature. This type of signature is used to sign applications for testing purposes, regularly available in Android Studio.

Why often MOD APK apps get warning about Android.PUA.DebugKey?

For apps uploaded to Google Play, the developer will have to sign the app with a personal signature of their own. As for MOD APK files, they are only signed with the debug signature. Modders have no way to get the developers’ signatures.

Is Android.PUA.DebugKey dangerous?

The answer is NO DANGER.

As stated above, Android.PUA.DebugKey in 99% of cases is a false positive warning.

An online virus scanner like VirusTotal often gives inaccurate results.

The world’s most popular antiviruses like Norton, Kaspersky, AVG… do not consider DebugKey a harmful virus.

This topic is also discussed a lot on forums. Experienced users all say that Android.PUA.DebugKey is a false positive warning. You can read more on Reddit, Twitter,…