Duper

about

description

Lost your phone? Send it "duper". Why "Duper"? It's French verlan (backwards slang) for "perdu" — meaning "lost". Reverse the syllables: du-per. The app that finds what's lost, named after being lost. Duper lets you remotely control your Android phone using SMS commands. It has no account, server, tracking SDK, or internet permission. Secrets, settings, command history, and location data stay on the device and are excluded from Android backups and device transfers. Send "duper ring" to make your phone ring with the flashlight blinking. Useful when you've lost your phone nearby. Device and Do Not Disturb policies may limit alerts. Send "duper locate" to receive GPS coordinates by SMS at regular intervals. Useful in an emergency or when you lend your phone to someone. Features: • Ring with flash, bypasses silent mode • GPS location tracking via SMS • Both modes stop when the phone is unlocked • Configurable command prefix, optional Ring password, Locate secret, duration, and interval • Custom ringtone support • Works entirely offline over SMS • No account, no cloud, no tracking The Camera permission is used only to control the device torch during a ring alert. Duper does not capture photos or video. The Vibration permission is used only for ring alerts. Location uses location permissions, including background location when the app is closed. The optional ADB-only WRITE_SECURE_SETTINGS permission lets Duper attempt to enable Android location services when they are off; it is not needed when location services are already enabled. Ring and Locate are disabled by default. Ring can use an optional password and optional SMS confirmation; Locate requires its own secret and sends SMS responses. The app requests only the permissions needed when you enable each mode. For privacy, remote commands run only while the phone is locked and stop when it is unlocked. Note: On Android 13+, you may need to allow restricted settings once in the app settings before granting permissions. Open source under GPL-3.0.

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-09-17T22:32:10.084122+00:00

last event

2026-10-08 06:10 UTC

install

zapstore.dev or any Zapstore-compatible client

source & build

repository

https://github.com/sudo-tiz/duper

arch flags

android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64

manifest

missing

releases (kind 30063)

3 releases indexed; latest 2.1.2.

version	channel	released	event
2.1.2	main	2026-09-22 13:11 UTC	9f32df9e…
2.1.0	main	2026-09-21 17:31 UTC	2219286a…
1.1.5	main	2026-09-16 12:48 UTC	22c90d56…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

2.1.2 — app-release.apk

sha256

b80d456f7d70a6741eb920b42d6ef2b6fdced246969309299f473511707f71e3

size

1.2 MB

archs

android-x86, android-x86_64, android-arm64-v8a, android-armeabi-v7a

version code

2001002

apk cert sha256

70c900bd34d2a58fb368919dd9c86ca5a3ae6d646f3c3609a31ef2004b993b98

download

app-release.apk

2.1.0 — app-release.apk

sha256

e2b59ff76db8abc15776ab4643fe2e91764b8f3fee7eba2039eb64d408ad6388

size

1.2 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64

version code

2001000

apk cert sha256

70c900bd34d2a58fb368919dd9c86ca5a3ae6d646f3c3609a31ef2004b993b98

download

app-release.apk

1.1.5 — fr.sudotiz.duper_1001005.apk

sha256

7b14b431ffa73376a0b1e6061da6eccbebe3f4a7c94c49a410d596dad916027b

size

1.2 MB

archs

android-x86, android-x86_64, android-arm64-v8a, android-armeabi-v7a

version code

1001005

apk cert sha256

70c900bd34d2a58fb368919dd9c86ca5a3ae6d646f3c3609a31ef2004b993b98

download

fr.sudotiz.duper_1001005.apk

Showing the newest 3 asset descriptors; the full set is in /api/apps/78ce6faa…