Skip to content

Replace with Signed Package

Protection changes your artifact, which invalidates any code signature it had. The Replace with Signed Package flow lets you sign the protected build with your own certificate and upload the signed copy back to PyLocket, so the version your customers download is the trusted, signed one.

When to use it

Use Replace with Signed Package after you have:

  1. Downloaded the protected build from PyLocket.
  2. Signed it with your own certificate (Apple Developer ID for macOS, Authenticode for Windows). See Code Signing.

You then upload the signed file in place of the protected one. PyLocket keeps the same build, license bindings, and download links; only the bytes customers receive change to your signed version.

How to replace a build

  1. Open the Developer Portal, go to your app, and open the Builds page.
  2. Find the protected build and choose Replace with Signed Package.
  3. Select your signed file:
    • Windows: the signed .exe.
    • macOS: the signed .app packaged as .app.zip.
  4. Upload. PyLocket verifies the upload is a signed copy of that exact protected build (same code, only signature data differs) and swaps it in.

It must be the same protected build, just signed

The check confirms your upload is the current protected build with a signature added, not a different or older binary. If you see a "does not appear to be a signed copy of the current protected build" message, you most likely selected an older file or a different binary. Re-download the current protected build, sign that exact file, and upload the result.

The "Ready - Signed" badge

Once a signed replacement is accepted, the build's status on the Builds page shows Ready - Signed with a lock icon, instead of the normal Ready. This is your at-a-glance confirmation that customers are downloading a code-signed package.

A build keeps working exactly as before whether or not it is signed. The badge is purely informational; it does not change download links, license behavior, or anything your customers do.

Topic Link
Sign your app Code Signing
Distribute macOS apps Distributing macOS .app bundles
Distribute your app Distribute Your App