Remember not to decrypt or verify the received token from within your client app, and never expose any decryption keys to the client app. To manage and download your response encryption keys, you must use the Play Console, and your app must be available on Google Play.