Apktool — authorized decode/build overview

Last updated: · By the BinBench editorial team · Stars and releases checked via the GitHub API
For legal, authorized and educational use only. Only analyze software you own or have written permission to examine.
Quick answer

Apktool (apktool.org, iBotPeaches/Apktool, Apache-2.0) is the standard decode → edit resources/Smali → build loop for Android packages. Use it on APKs you own or have written authorization to modify.

On this page

Snapshot

FieldValue
JobDecode resources + Smali; rebuild APK project trees
Not forJava decompilation (use jadx)
Frameworksapktool if for OEM framework APKs when required
Peersapktool-workflow, jadx vs Apktool, JADX-GUI tips

Allowed framing

  • Localizing or adding debug flags to your application builds in a company lab.
  • Teaching Smali literacy on course APKs students built.
  • Resource inspection (-s / -r style flags per CLI docs) before escalating to runtime tools.

Scope we will not cover

  • No piracy / paid-app redistribution.
  • No Play Integrity / DRM / license bypass cookbooks.
  • No mass scraping of third-party Store APKs without authorization.
  • No “remove ads from someone else's app” framing.

Beginner path (authorized only)

  1. Install a JDK and Apktool per upstream docs; confirm apktool -version.
  2. Decode a tiny APK you built: apktool d app.apk -o app_out.
  3. Inspect AndroidManifest.xml and res/; make a trivial authorized change.
  4. Build with apktool b app_out -o app_rebuilt.apk; resign with your lab keystore; install on an emulator.
  5. For Java-like reading, open the same APK in jadx — keep Apktool for resources/Smali.
Which to pick
  • Use Apktool for authorized resource/Smali decode-build loops.
  • Prefer jadx when you only need readable Java-like source.
  • Refuse piracy and DRM-bypass framing.

For legal, authorized and educational use only.

FAQ

What does Apktool do?

Apktool decodes an APK into a project-like folder (resources nearly original form + Smali) and can rebuild that folder into an APK. It is not a Java decompiler — pair with jadx for Java-like source (jadx vs Apktool).

Basic decode / build commands?

Docs show apktool d app.apk -o out to decode and apktool b out -o rebuilt.apk to build. Build expects a decoded directory, not the original APK file path.

Do I need to resign?

Yes. Upstream building docs note you must resign a rebuilt application before it will run under normal Android install rules. Use keys you control for lab apps.

Manufacturer framework errors?

Some OEM APKs need framework resources installed first (apktool if framework.apk). See official frameworks docs — still only on devices/APKs you may analyze.

Does Apktool allow piracy?

No. Upstream README states Apktool is not intended for piracy. BinBench covers authorized/educational use only.

Sources