diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 53bb12a45..b15de8c8c 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -22,15 +22,21 @@ jobs:
           java-version: 11
           distribution: temurin
 
-      - name: build debug
-        run: ./gradlew assembleNightly
-
       - name: Decrypt files
         env:
-          ssh_key: ${{ secrets.ssh_key }}
+          KEYSTORE: ${{ secrets.keystore }}
+          SSH_KEY: ${{ secrets.ssh_key }}
         run: |
-          echo "$ssh_key" | base64 -d > ssh_key
+          echo "$KEYSTORE" | base64 -d > kiwix-android.keystore
+          echo "$SSH_KEY" | base64 -d > ssh_key
           chmod 600 ssh_key
+          
+      - name: build debug
+        env:
+          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
+          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
+          KEY_STORE_PASSWORD: ${{ secrets.KEY_STORE_PASSWORD }}
+        run: ./gradlew assembleNightly
 
       - name: Set date variable
         run: echo "DATE=$(echo $(date +%Y-%m-%d))" >> $GITHUB_ENV
diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 389a47e7e..9d8fe2d5d 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -68,6 +68,8 @@ android {
     create("nightly") {
       initWith(getByName("debug"))
       matchingFallbacks += "debug"
+      // Build the nightly APK with the released keyStore to make the APK updatable. See #3838
+      signingConfig = signingConfigs.getByName("releaseSigningConfig")
     }
   }
   bundle {