Skip to content
DL2App
Sign inStart free

assetlinks.json validator for Android App Links

Enter the domain your App Links use. We fetch /.well-known/assetlinks.json the way Android's verifier does, check every field, and ask Google's Digital Asset Links service whether it can see your app.

Free. No account, no email.

Check for a specific app (optional)

Team ID, a dot, then the bundle ID.

The applicationId in your Gradle file.

The report covers both the Android and Apple files, and the link itself if you enter a full URL. Reports stay shareable for seven days.

What the validator checks

  • Where the file is. Android fetches https://your-domain/.well-known/assetlinks.json for every host in an intent filter marked android:autoVerify="true".
  • Status and redirects. A direct 200 over HTTPS with a valid certificate. The verifier doesn't follow redirects, and a login wall, cookie wall or bot check makes the file unreadable.
  • Content. A JSON array, sent as application/json.
  • Relation. delegate_permission/common.handle_all_urls, spelled exactly.
  • Package name. Matches your app's applicationId exactly, including any .debug suffix on test builds.
  • Fingerprints. SHA-256 (not SHA-1), uppercase hex pairs separated by colons.
  • Google's view. We ask Google's Digital Asset Links API whether it can read the statement for your host, which is closer to what a phone sees than a browser is.

A valid file

assetlinks.json
[
  {
    "relation": ["delegate_permission/common.handle_all_urls"],
    "target": {
      "namespace": "android_app",
      "package_name": "com.example.app",
      "sha256_cert_fingerprints": [
        "14:6D:E9:83:C5:73:06:50:D8:EE:B9:95:2F:34:FC:64:16:A0:83:42:E6:1D:BE:A8:8A:04:96:B2:3F:CF:44:E5"
      ]
    }
  }
]

Add every key your builds are signed with to sha256_cert_fingerprints. The assetlinks.json generator builds the file from your package name and fingerprints.

Common errors and fixes

  • Wrong fingerprint (the most common one). With Play App Signing, Google re-signs your app, so the file needs the app signing key from Play Console (Protected with Play › Play Store distribution › Go to Play app signing), not your upload key. Debug builds need the debug key from ./gradlew signingReport.
  • One host fails, all fail. On Android 11 and older, if any host in the app's verified intent filters fails, none are verified. Android 12 and later verify each host separately.
  • The file redirects or returns HTML. Serve /.well-known/assetlinks.json on the exact host, before any app rewrite, and outside bot protection.
  • Fixed the file, still opens Chrome. Android checks at install time. Run adb shell pm verify-app-links --re-verify your.package, then adb shell pm get-app-links your.package should say verified. The Android App Links checklist covers the app side too.

Questions people ask

What is assetlinks.json?

assetlinks.json is the Digital Asset Links file that tells Android which apps may open links on your domain. Android reads it to verify App Links; when verification passes, a tapped link opens your app directly instead of the browser.

Where does assetlinks.json go?

At https://your-domain/.well-known/assetlinks.json, served with status 200, no redirect, and content type application/json. Each host in your verified intent filters needs its own file.

Which SHA-256 fingerprint goes in assetlinks.json?

The fingerprint of the certificate that signed the installed app. For apps from Google Play with Play App Signing, that is the app signing key in Play Console, not your upload key. Add your debug key as well if you test debug builds.

How do I check if my App Links are verified on a phone?

Connect the phone and run adb shell pm get-app-links your.package.name. Each host should say verified. After fixing the file, run adb shell pm verify-app-links --re-verify your.package.name to check again without reinstalling.

Does this check iOS too?

This page focuses on the Android file. The AASA validator checks the Apple file, and the full link checker runs both plus how a link behaves in in-app browsers.

iPhone next: the AASA validator.

DL2App serves an assetlinks.json built from the package name and fingerprints you enter once, on every link domain, and re-checks it on a schedule so a broken file is caught before your users find it.

Try DL2App free

What people use next

All 17 tools →