What precautions and warnings should we know about, when using the new "APK Signature Scheme v2"? : <h2>Background</h2>

<p>Recently, when I was about to sign my APK to be published to the Play Store, I got this new option:</p>

<p><a href="https://i.stack.imgur.com/nvk9B.png" rel="noreferrer"><img src="https://i.stack.imgur.com/nvk9B.png" alt="enter image description here"></a></p>

<p>Pressing on the "Signature help" link, opened this webpage:
<a href="https://developer.android.com/about/versions/nougat/android-7.0.html#apk_signature_v2" rel="noreferrer">https://developer.android.com/about/versions/nougat/android-7.0.html#apk_signature_v2</a></p>

<p>Searching more, I've found this:</p>

<p><a href="http://android-developers.blogspot.co.il/2016/11/understanding-apk-packaging-in-android-studio-2-2.html" rel="noreferrer">http://android-developers.blogspot.co.il/2016/11/understanding-apk-packaging-in-android-studio-2-2.html</a></p>

<p>It turns out that it's a new verification on Android 7.x, which can help make the APK more secure, yet also a bit smaller in size.</p>

<p>I tried using this new feature, and as was written on the blog, it does make the APK a bit smaller. Also, as it was written, it's meant only on Android 7.x and above (yet you can actually sign using both methods on the same APK, letting you install the app on older versions of Android too).</p>

<h2>The problem</h2>

<p>I don't understand if it's safe to use the new signing mechanism, and what exactly they warn about on the docs. </p>

<p>There is at least one warning I've read that I don't think needs special care for most develoeprs:</p>

<blockquote>
  <p>Caution: If you sign your app using APK Signature Scheme v2 and make
  further changes to the app, the app's signature is invalidated. For
  this reason, use tools such as zipalign before signing your app using
  APK Signature Scheme v2, not after.</p>
</blockquote>

<p>I think I can ignore this warning, because I just let the IDE itself build the APK using the default build behavior. </p>

<h2>What I tried</h2>

<p>I tried using all 3 ways to sign the app:</p>

<ul>
<li>v1</li>
<li>v2</li>
<li>v1 &amp; v2 (together in a single APK)</li>
</ul>

<p>It seems that v2 alone cannot be installed on pre-7.x versions of Android, yet the rest can, and it also seems that v2 is smaller than v1, while v1&amp;v2 is a really tiny bit larger than v1 . </p>

<h2>The questions</h2>

<ol>
<li><p>Is it safe to switch from the old signing to the new one (Enabling both signing of course) ? </p></li>
<li><p>Will users have any issues upgrading? Will users upgrading from v1 to v2, or from v2 (or v1&amp;v2) to v1 (in case something went wrong) - have any issues?</p></li>
<li><p>Should I know about any warnings? Was I right that I can ignore the warning I've mentioned?</p></li>
<li><p>Aside from better security, what does signing using v1&amp;v2 (together) provide, that I don't have on v1 ?</p></li>
<li><p>My guess is that only from Android 7, we will be able to use just v2, which provides a way for having smaller APKs. Is it true?</p></li>
</ol>
