Verified Apps

about

description

Verified Apps is an app signing certificate hash viewer and verifier. It checks your installed apps (or any APK file) against a built-in database of known-good app signing fingerprints. <b>IMPORTANT:</b> We maintain and release this app and our dataset in good faith and on a best-effort basis. We are not committing to perfect security, immediate bug fixes, or comprehensive app coverage in our dataset. As always with security tools like this, you must consider your own threat model and plan accordingly. We cannot advise you personally on the appropriate security measures for your specific situation. Your use of this app is at your own risk, and you may not hold any contributors liable for any adverse events which may occur. README: https://github.com/privacyguides/verified-apps-android/blob/main/README.md MAINTAINER: https://www.privacyguides.org/ You can share or copy verification info for use outside the app. If an app is not in the database, you'll have the option to open a pre-filled GitHub submission issue in your browser. <b>What is this?</b> This is a fork of AppVerifier (https://github.com/soupslurpr/AppVerifier), but many components have been removed, so it no longer serves the same purpose. Notably, it no longer includes peer-to-peer verification via clipboard sharing. This app **only** checks apps against our crowdsourced database. <b>App verifications & reliability</b> Please note that <b>mismatch</b> results may not always indicate an illegitimate app. For example, if we only have the F-Droid version of an app in our database, and you downloaded the app from Google Play where Google signed it with their own certificate, then your app would not match our database and will be flagged. When you find a mismatch, we <b>always</b> recommend submitting that app information to our issue tracker, you will be prompted to do so within the app. We will work to verify the legitimacy of your submission. If the app you have is indeed legitimate, we will include it in the next app release. If the app you have is illegitimate, we will inform you in the submitted issue. <b>What this app is good for</b> 1. <b>Contributing to Privacy Guides' crowdsourced database (https://github.com/privacyguides/verified-apps/) of developer signing certificates.</b> If an app on your device is listed as unknown or a mismatch in this app, you will be shown a button to make a submission to our issue tracker, and it will automatically fill out the submission form to make the process as easy as possible for you. You will still need an account with our issue tracker to make a submission. 2. <b>Comparing your installed apps to Privacy Guides' database without needing to trust any additional parties/developers.</b> We include our entire database locally in this app, which is built and signed by us. We therefore control the entire pipeline end-to-end, and once downloaded your local data can never be modified without updating the app to a new build. <b>What this app is not good for</b> 1. <b>Comparing your apps to anyone's hashes besides our crowdsourced database.</b> We've removed all clipboard/user-based verification tools, as many other apps already provide this functionality well, and we do not want to maintain parallel features unnecessarily.

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-10-08T09:25:16.106865+00:00

last event

2026-10-08 09:25 UTC

install

zapstore.dev or any Zapstore-compatible client

source & build

repository

https://github.com/privacyguides/verified-apps-android

arch flags

android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64

manifest

missing

releases (kind 30063)

1 release indexed; latest 26.6.14.

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

26.6.14 — VerifiedApps-26.6.14.apk

sha256

fd41d6a1013dd10e4502a89539a4ae40afc0a602cb756a9c5665086c07ab64b6

size

2.8 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64

version code

26060014

apk cert sha256

405c6bd2ca7c3aae8f463c6f8b55bcf0ddac431c5ed8eaff65d106c9817a207f

download

VerifiedApps-26.6.14.apk

Showing the newest 1 asset descriptor; the full set is in /api/apps/78ce6faa…