Verify your install

20.07 — v0.10.2-dev

20.07 is installed from a file, not from an app store, so nobody else checks it for you. Two checks tell you the file is the one published here: its checksum, and the fingerprint of the key it is signed with.

1. The signing fingerprint (works on the installed app)

Every release of 20.07 is signed with the same key. Open the app, scroll to the bottom of the home screen and tap the line that starts with Version. Tap it again to copy the full value. It must match:

7C:F7:10:1A:A7:5F:E8:BB:57:BE:38:E7:72:65:10:A0:6A:07:5B:14:F1:12:6F:F8:6A:C2:2B:2D:3F:8A:76:64

Debug builds (the ones with "Export diagnostics") use a different key and show a different value; that is expected.

2. The file checksum (before you install)

File	SHA-256
`20.07-v0.10.2-dev-release.apk`	`a0849e44a6de92307cd392f195a5f0e98172fdef65895067d955e00c536ffea6`

The same value is in SHA256SUMS next to the APK, and in the notes of each GitHub release.

On Linux or macOS: shasum -a 256 20.07-v0.10.2-dev-release.apk
On Windows (PowerShell): Get-FileHash 20.07-v0.10.2-dev-release.apk -Algorithm SHA256

3. Check the signature on a computer (optional)

With the Android SDK build tools: apksigner verify --print-certs 20.07-v0.10.2-dev-release.apk. The line "certificate SHA-256 digest" is the fingerprint above, written without colons and in lower case.

If the values differ

Do not install the file (or uninstall the app if it is already installed), and download it again from the GitHub releases page. Report a mismatch through the repository's issues.