Have an APK from somewhere else? Verify its hash here.

Paste a SHA-256 value or select a file. The browser calculates the fingerprint locally and compares it with hashes published in the current app repository.

— or —

Drop an APK / XAPK file here. The hash is calculated in your browser — the file is never uploaded by this frontend.

private by design · local WebCrypto hashing · only the fingerprint is compared

How verification works

The result describes whether an exact hash exists in the repository; it is not a complete malware verdict.

Match — published release

The fingerprint is identical to a SHA-256 value stored for a published app release.

Unknown — not in the repository

No exact match was found. Compare the value with a hash published by the developer before installing.

Different fingerprint

When the same release has a published official hash and your value differs, do not assume the file is identical.

Verification tool FAQ

Is my file uploaded?

No. The SHA-256 is calculated locally with the WebCrypto API. This theme does not upload the selected file.

How can I calculate a file hash myself?

Use sha256sum yourfile.apk on Linux/macOS or certutil -hashfile yourfile.apk SHA256 on Windows.

The result is “unknown” — is my file dangerous?

Not necessarily. It means the exact fingerprint is absent from the current repository. Verify it through another trusted publisher source before installing.