Verify the Ensu Android APK

If you downloaded the Ensu APK directly from our GitHub releases, you can verify that it was signed with Ente's expected signing certificate.

These fingerprints are for the direct APK download. Play Store packages may use different signing keys.

Certificate fingerprints

SHA1: 55:32:94:80:28:F7:C7:43:9F:41:07:58:4B:13:F1:56:38:00:75:0C
SHA256: 66:99:CF:8C:42:AF:42:7B:55:2C:96:20:54:E5:D6:95:89:FA:49:09:96:55:3A:53:04:5E:B3:9C:C3:4F:2E:66

bash

apksigner verify --print-certs <path_to_apk>

Compare the SHA1 or SHA256 value printed by apksigner with the fingerprints above.