Many GOS users who are not using Google Play store, FDroid and Aurora, using AppVerifier for checking the integrity of their downloaded apks, usually with Obtanium (like me). The problem is some apps are neither in the AppVerifier's database or their hash is nowhere published on the internet. But maybe we can have a workaround.

If you're in the same shoes, feel free to post any of your apps hash for comparing with each other. If more people share the same app's hash, the better. Also, Google Play users warmly welcome to do the same, in fact, as they have the biggest security, that would be a big help.

    I planned to start right away, but run into a problem: I cannot copy the hashes from AppVerifier. A message says: no app can perform this action. Any idea about how to fix this?

      bootloader
      Strange. I can copy fine. For example, Tubular's hash:

      org.polymorphicshade.tubular
      8A:D7:02:5A:8C:91:14:54:E2:A7:B4:51:5E:36:0C:52:CA:63:EC:04:10:A0:42:FF:46:E9:AD:05:B5:09:E1:87

        I can copy them without a problem.

        com.standardnotes
        58:3F:C4:1B:49:0C:38:0B:56:FB:E9:EE:47:38:1E:B4:EF:53:E0:37:19:A5:50:3F:C1:F2:9D:CD:8E:28:90:2A

        com.wireguard.android
        84:A1:3F:A2:C4:E0:06:4B:0C:11:65:4B:8A:86:57:4B:7A:9B:93:52:A3:83:4C:EE:32:45:5B:06:1C:3D:41:27

        de.danoeh.antennapod
        A8:54:1B:7E:6C:69:76:B0:B7:E3:A9:0B:E8:9C:63:A6:66:BE:37:3F:1D:BB:ED:A6:71:AC:2E:17:26:5D:6A:0F

        com.akylas.documentscanner
        0D:10:AA:10:E0:3A:7E:76:97:22:BE:43:88:BE:63:BD:15:7A:7B:7B:F1:96:FB:3C:EB:AB:87:37:F9:6C:A8:71

        io.ente.photos.independent
        35:ED:56:81:B7:0B:B3:BD:35:D9:0D:85:6A:F5:69:4C:50:4D:EF:46:AA:D8:3F:77:7B:1C:67:5C:F4:51:35:0B

        com.junkfood.seal
        44:93:58:2A:41:48:DF:38:FC:26:90:73:C8:78:7C:31:C4:31:ED:5B:6D:62:71:08:92:A0:40:6F:F5:0C:4D:67

        io.homeassistant.companion.android.minimal
        11:19:4B:A8:09:B4:2D:DF:0E:1A:7D:EC:68:42:A5:9C:7F:F1:11:9C:54:82:E9:5F:EB:FF:D5:C6:01:4D:AA:5A

        app.revanced.manager.flutter
        B6:36:2C:6E:A7:88:8E:FD:15:C0:80:0F:48:07:86:AD:0F:5B:13:3B:4F:84:E1:2D:46:AF:BA:5F:9E:AC:12:23

        de.ph1b.audiobook
        11:A4:CA:EE:0B:A3:EB:5A:35:2D:11:25:AB:D3:29:25:20:9E:89:60:15:A5:D9:CA:0F:D9:F8:2D:AE:20:4F:AA

        app.organicmaps.web
        B9:C7:AE:79:A5:A9:02:70:DF:08:A1:32:E5:36:B9:C6:66:F5:BE:F1:F5:9B:30:4F:CE:CF:86:87:86:5E:4B:5B

        org.schabi.newpipe
        CB:84:06:9B:D6:81:16:BA:FA:E5:EE:4E:E5:B0:8A:56:7A:A6:D8:98:40:4E:7C:B1:2F:9E:75:6D:F5:CF:5C:AB

        org.telegram.messenger.beta
        FB:5B:16:08:98:5F:C7:0C:1F:C8:AB:24:CF:63:27:01:F7:70:46:0C:72:0B:C1:8E:35:02:DD:FF:30:65:BD:44

        deckers.thibault.aves.libre
        F4:79:47:27:E4:54:16:D8:7C:48:71:38:29:2B:70:9F:11:D1:CD:7D:AB:55:84:D8:C6:85:7D:92:E0:66:60:4B

        ch.threema.app.libre
        05:08:B5:3F:F1:02:B5:38:91:9C:83:4E:9E:6B:6A:FB:A0:46:ED:F6:7E:17:CA:4D:1C:E7:A4:B9:C3:82:37:41

        code.name.monkey.retromusic
        B1:F1:41:22:9A:C4:2E:28:33:15:49:86:33:65:A6:0A:74:25:40:8C:A0:8C:E9:61:99:26:BE:BC:18:71:E3:42

        org.proninyaroslav.libretorrent
        B0:88:D4:72:A9:80:18:64:5C:DE:EF:8E:93:33:8D:58:B3:F2:38:92:18:7F:DF:63:F7:39:58:38:1E:27:E5:83

        I really like the idea of AppVerifier, but I wish the internal database was bigger. At least like the 100 biggest privacy FOSS apps or something like that :(

        Edit: also a mass export option for all installed app hashes would be great for this :p

        com.cakewallet.cake_wallet
        Location: cakewallet.com then github apk
        C5:40:53:AB:0F:10:D9:54:17:62:A3:DA:76:65:AE:3D:BA:5E:7C:74:3A:B4:F1:08:A5:34:9D:62:AC:10:6E:F5

        keepass2android.keepass2android
        Location: github apk
        0B:F8:05:6D:3A:39:4E:D7:C7:71:73:C4:B4:2C:80:05:65:B4:F0:A4:29:77:56:9C:F3:47:2C:27:1C:56:29:39

        com.cheogram.android
        Location: cheogram.com then apk link
        CC:F5:2D:C9:11:63:F1:6A:BA:9E:5B:15:0D:81:6C:36:97:B2:C9:7D:A0:56:71:3B:AC:1E:C4:26:EC:7E:FE:B2

        com.generalmagic.magicearth
        Location: Requesting apk by email
        FA:91:BD:3A:8B:FA:2B:03:BD:A4:84:22:B2:38:D5:84:F2:39:21:15:4A:52:79:E7:21:F2:F9:0A:74:D3:88:06

        com.standardnotes
        Location: standardnotes.com apk
        58:3F:C4:1B:49:0C:38:0B:56:FB:E9:EE:47:38:1E:B4:EF:53:E0:37:19:A5:50:3F:C1:F2:9D:CD:8E:28:90:2A

        Sbpr true. It would be better if AppVerifier would increase its hash database or if their was a website listing all those hashes.

        But I think this post works for now too. People only need to use the search function of this forum to search for their hash and then could easily find the comments who got the same hash.

        Edit: OK nvm. I just tried to search for the standard notes hash and couldn't find it trough the forum search :/

          Here's mine. Most of mine come from the play store except for Mull, GrayJay, PipePipe, Red Moon, F-Droid Basic, and Obtainium. Apps listed are to help others verify apps, not as an app recommendation.

          Mull browser
          us.spotco.fennec_dos
          26:0E:0A:49:67:8C:78:B7:0C:02:D6:53:7A:DD:3B:6D:C0:A1:71:71:BB:DE:8C:E7:5F:D4:02:6A:8A:3E:18:D2

          Feedly
          com.devhd.feedly
          B4:EF:58:DB:C0:76:3C:0B:F3:EE:D7:B1:5C:96:11:AE:A8:03:1E:97:36:0E:B9:85:D5:2E:DA:CC:2C:63:77:5E

          WhatsApp
          com.whatsapp
          39:87:D0:43:D1:0A:EF:AF:5A:87:10:B3:67:14:18:FE:57:E0:E1:9B:65:3C:9D:F8:25:58:FE:B5:FF:CE:5D:44

          Obtainium
          dev.imranr.obtainium
          B3:53:60:1F:6A:1D:5F:D6:60:3A:E2:F5:0B:E8:0C:F3:01:36:7B:86:B6:AB:8B:1F:66:24:3D:A9:6C:D5:73:62

          Aves Gallery (play store)
          deckers.thibault.aves
          12:54:B3:37:CD:99:15:75:57:FA:C4:75:9D:03:69:51:53:34:38:24:05:0E:C1:C9:3B:2D:26:42:C6:66:E4:E2

          Walmart
          com.walmart.android
          F3:CF:E9:B2:7C:F7:7A:41:40:51:73:4B:6A:07:42:2E:D8:B8:ED:71:DE:02:E0:D1:E8:A3:69:94:C1:5A:17:A2

          Brave
          com.brave.browser
          9C:2D:B7:05:13:51:5F:DB:FB:BC:58:5B:3E:DF:3D:71:23:D4:DC:67:C9:4F:FD:30:63:61:C1:D7:9B:BF:18:AC

          FUTO Keyboard (Play Store)
          org.futo.inputmethod.latin.playstore
          9B:3A:0E:AE:B9:BC:98:2F:85:28:9B:33:BD:0E:AB:CD:34:AF:74:8A:9D:F5:9B:4E:3B:78:E2:25:29:93:98:EE

          MuPDF
          com.artifex.mupdf.viewer.app
          A0:B9:A1:FA:8F:17:1F:EE:79:70:C4:A3:F5:0F:D1:19:57:F8:3D:F7:B4:89:ED:46:96:C7:12:60:9E:DA:53:4F

          Catima
          me.hackerchick.catima
          75:FD:99:1B:AC:EA:84:8E:5A:BF:F1:4A:01:D9:60:9B:76:50:CF:03:06:B3:7A:60:ED:56:15:67:8C:B3:64:07

          Red Moon (F-Droid repo through obtainium)
          com.jmstudios.redmoon
          66:85:06:F3:98:AF:7C:EF:CC:AB:8C:21:C2:F1:40:9A:9D:00:51:CD:2D:9D:4A:B3:22:19:6B:67:EE:5B:34:47

          Signal
          org.thoughtcrime.securesms
          29:F3:4E:5F:27:F2:11:B4:24:BC:5B:F9:D6:71:62:C0:EA:FB:A2:DA:35:AF:35:C1:64:16:FC:44:62:76:BA:26
          4B:E4:F6:CD:5B:E8:44:08:3E:90:02:79:DC:82:2A:F6:5A:54:7F:EC:C2:6A:BA:7F:F1:F5:20:3ASignal):8C:D8

          Upside
          com.upside.consumer.android
          ED:99:88:71:D7:9D:5E:91:A4:FF:BB:75:71:5B:1B:FD:DB:4B:06:8D:80:EF:C3:75:5F:AA:F0:3F:C5:87:D8:B2

          Comic Screen
          com.viewer.comicscreen
          DA:B3:D2:40:F3:67:96:6F:2E:30:26:CB:41:7B:75:10:45:14:45:62:66:43:2D:2A:BC:41:71:90:1A:ED:87:E0

          Microsoft OneDrive
          com.microsoft.skydrive
          A0:79:42:15:27:8A:56:7E:88:7A:F6:CD:E0:15:A5:E8:84:14:EF:64:0F:7D:AB:38:55:A3:E7:79:65:8B:E7:78

          Trakt
          tv.trakt.trakt
          2A:FF:40:C6:A3:68:82:31:0C:6B:D1:B3:9F:F1:0D:A0:4A:DD:FB:D2:D1:00:1B:8C:29:3C:9B:CF:5C:40:F5:8B

          Proton VPN
          ch.protonvpn.android
          DC:C9:43:9E:C1:A6:C6:A8:D0:20:3F:34:23:EE:42:BC:C8:B9:70:62:8E:53:CB:73:A0:39:3F:39:8D:D5:B8:53

          Private Internet Access PIA VPN
          com.privateinternetaccess.android
          8B:6A:E2:B9:B0:6F:4D:18:17:FD:3F:84:6F:88:E4:40:DD:43:1A:3F:46:62:0B:DD:4A:15:2B:70:FC:90:89:A2

          Sky Map
          com.google.android.stardroid
          6E:7E:3A:74:A4:D7:C7:7A:E4:B9:81:42:6E:D0:A0:7E:78:E1:17:64:69:8C:DC:9B:DA:9B:74:0E:A2:BE:23:98

          KeePassDX
          com.kunzisoft.keepass.free
          46:D5:15:D5:F4:15:72:42:0C:EF:30:C0:7B:52:6B:F2:C4:0F:C4:A1:13:EF:19:1F:4F:9D:F9:01:2E:09:1F:35

          Max (formerly HBO Max)
          com.wbd.stream
          61:9C:BB:02:7B:71:55:60:B8:43:D1:5A:55:99:F9:00:48:5A:F1:CD:42:94:09:78:11:A7:76:09:BC:82:73:A8

          Accrescent
          app.accrescent.client
          06:7A:40:C4:19:3A:AD:51:AC:87:F9:DD:FD:EB:B1:5E:24:A1:85:0B:AB:FA:48:21:C2:8C:5C:25:C3:FD:C0:71

          Google Wallet
          com.google.android.apps.walletnfcrel
          1D:47:E5:1F:53:EB:11:C3:8B:69:94:00:F5:18:BD:B6:D6:D2:7A:1D:61:CC:51:E2:A6:9E:A8:28:C3:A2:DB:E8
          77:BD:89:7C:29:73:02:03:A5:48:D5:91:A0:78:3E:08:62:6C:2A:54:BC:22:C8:0E:A4:7E:D8:86:36:97:38:0C

          Yuka
          io.yuka.android
          A7:E3:C4:A6:12:68:01:86:93:7B:02:E7:B8:95:74:D5:FD:62:79:8B:8C:B6:68:97:39:92:FA:89:F6:19:8F:CB

          Google Voice
          com.google.android.apps.googlevoice
          3D:7A:12:23:01:9A:A3:9D:9E:A0:E3:43:6A:B7:C0:89:6B:FB:4F:B6:79:F4:DE:5F:E7:C2:3F:32:6C:8F:99:4A
          5A:AD:2B:EE:6D:B9:5D:17:E0:5A:08:D7:D1:E6:4C:10:A1:51:18:79:15:44:83:91:6B:6A:E6:C7:FD:9C:B0:C6

          Bitwarden
          com.x8bit.bitwarden
          24:E0:6C:04:C2:08:04:8F:19:F1:C9:93:B4:DD:A4:43:0E:A8:B0:6D:B8:37:5E:A0:E3:7B:83:46:96:B9:AC:3A

          K-9 Mail
          com.fsck.k9
          55:C8:A5:23:B9:73:35:F5:BF:60:DF:E8:A9:F3:E1:DD:E7:44:51:6D:93:57:E8:0A:92:5B:7B:22:E4:F5:55:24

          Planet Fitness
          com.planetfitness
          2C:87:7B:4C:C0:43:2E:E6:F3:DD:66:53:55:D7:53:4B:B6:BA:A6:56:75:C7:ED:B2:8C:8E:E8:51:9A:CB:5C:90

          GrayJay
          com.futo.platformplayer
          EF:81:ED:A9:8F:61:7F:7F:17:07:D8:05:09:F2:8D:AE:4E:50:F5:6E:41:E0:77:EB:30:24:D9:C9:07:2D:07:4E

          Weawow
          com.weawow
          70:3B:0F:C8:DC:E8:8D:21:56:64:B0:97:CA:A1:2A:66:B7:E1:31:FE:43:19:AC:57:6B:3A:36:FA:3B:03:67:4D

          Vizpin Smart
          com.eckey.vizpin.dm
          43:F6:D7:1E:13:EA:F0:62:BB:9F:D3:4A:0C:6C:D5:B3:BA:A8:AD:14:DE:DC:87:99:23:7F:2F:F9:33:FD:53:DC

          Standard Notes
          com.standardnotes
          58:3F:C4:1B:49:0C:38:0B:56:FB:E9:EE:47:38:1E:B4:EF:53:E0:37:19:A5:50:3F:C1:F2:9D:CD:8E:28:90:2A

          Yahoo! Finance
          com.yahoo.mobile.client.android.finance
          D3:F1:FB:1B:2C:81:E0:96:E3:F5:80:9A:50:3A:FD:A0:CF:AF:56:B9:D3:9D:ED:C6:56:EE:26:60:AC:EF:61:4C

          F-Droid Basic (F-Droid official repo via Obtainium)
          org.fdroid.basic
          EF:7F:82:2B:76:53:E2:01:1C:B8:C5:A7:FC:99:E8:D2:AD:E1:71:7E:53:9C:A5:6D:64:56:29:5E:3B:C0:73:12

          Google Find My Device
          com.google.android.apps.adm
          F0:FD:6C:5B:41:0F:25:CB:25:C3:B5:33:46:C8:97:2F:AE:30:F8:EE:74:11:DF:91:04:80:AD:6B:2D:60:DB:83
          7C:E8:3C:1B:71:F3:D5:72:FE:D0:4C:8D:40:C5:CB:10:FF:75:E6:D8:7D:9D:F6:FB:D5:3F:04:68:C2:90:50:53

          Feeder
          com.nononsenseapps.feeder.play
          AC:75:28:54:1E:6F:FC:7D:AD:2C:C7:AA:52:51:12:31:93:C0:09:2C:5B:52:FC:26:62:9D:0F:73:76:81:9D:58

          PipePipe
          InfinityLoop1309.NewPipeEnhanced
          DE:C7:34:29:CE:25:63:27:5F:5E:D1:98:25:E4:46:52:B3:2B:36:3A:46:F3:8B:DF:F9:AD:6D:CD:E4:84:2D:88

          SMS Backup & Restore
          com.riteshsahu.SMSBackupRestore
          F4:47:DC:11:66:22:7B:E1:BC:E3:44:1F:38:D8:CD:FA:79:9A:4F:7D:14:58:DA:15:AE:33:C3:F7:7C:38:ED:0A

          Google Earth
          com.google.earth
          3D:7A:12:23:01:9A:A3:9D:9E:A0:E3:43:6A:B7:C0:89:6B:FB:4F:B6:79:F4:DE:5F:E7:C2:3F:32:6C:8F:99:4A
          5A:AD:2B:EE:6D:B9:5D:17:E0:5A:08:D7:D1:E6:4C:10:A1:51:18:79:15:44:83:91:6B:6A:E6:C7:FD:9C:B0:C6

          Microsoft To Do
          com.microsoft.todos
          5F:A5:E6:BE:06:D6:FB:98:3F:26:2E:CE:61:34:C5:26:08:45:0C:B1:1D:C3:06:12:F7:80:59:D8:E7:69:AC:A1

          Brave - Beta
          com.brave.browser_beta
          9C:2D:B7:05:13:51:5F:DB:FB:BC:58:5B:3E:DF:3D:71:23:D4:DC:67:C9:4F:FD:30:63:61:C1:D7:9B:BF:18:AC

          Cinetrak (Trakt client)
          com.cinetrak.mobile
          0E:A1:98:D9:75:BE:E7:C3:BD:4D:62:69:BB:6F:2B:C9:53:BD:C6:C4:FA:20:7D:4B:06:8B:29:50:E7:E5:5D:45

            Hello, I'm not versed into technical matters, so I ask the noob question. Is there a way we can use our collection of hash fingerprints to append AppVerifier's database ?

            thanks to all for sharing the hashes and I can verify the apps in appverifier but the results never stick when going back to the app list after verification, is that expected behavior?

              prompter
              I believe it is currently just a simple mechanism to check for a successful hash match, but I could be wrong. It would be nice if user submissions could be stored in the app, but I think its intended for users to rely on the official hash database. Maybe that could change in the future?

                  a month later

                  Here is verification info I have copied from Appverifier for some of my apps, all installed from Play Store. I believe all of these (maybe except for Zotero) can also be obtained from the apps' websites or GitHub:

                  Element
                  im.vector.app
                  F3:FF:38:D2:E5:A6:38:84:86:4A:4E:0D:45:C5:3B:19:8E:7E:39:C0:50:5B:D9:63:F5:55:D6:53:2D:EA:BF:5F

                  GitHub
                  com.github.android
                  DF:08:C9:F2:D8:09:18:9D:9D:50:64:97:C1:57:45:A7:39:5A:41:53:6E:FB:43:3E:3A:EE:1A:ED:BE:11:B2:61

                  Standard Notes
                  com.standardnotes
                  58:3F:C4:1B:49:0C:38:0B:56:FB:E9:EE:47:38:1E:B4:EF:53:E0:37:19:A5:50:3F:C1:F2:9D:CD:8E:28:90:2A

                  Wireguard
                  com.wireguard.android
                  84:A1:3F:A2:C4:E0:06:4B:0C:11:65:4B:8A:86:57:4B:7A:9B:93:52:A3:83:4C:EE:32:45:5B:06:1C:3D:41:27

                  Voice
                  de.ph1b.audiobook
                  11:A4:CA:EE:0B:A3:EB:5A:35:2D:11:25:AB:D3:29:25:20:9E:89:60:15:A5:D9:CA:0F:D9:F8:2D:AE:20:4F:AA

                  Openreads
                  software.mdev.bookstracker
                  98:15:6C:9C:CB:52:8E:18:2A:58:85:40:CF:6C:16:EC:45:57:7C:FD:B9:B6:85:A5:BB:6F:79:97:03:DE:F3:7D

                  Zotero
                  org.zotero.android
                  37:B6:F1:19:C3:D4:5D:C2:5E:70:69:95:C5:30:F4:44:CF:B2:4C:A6:E7:AF:31:6D:6D:0F:D2:62:47:45:0A:8F

                  Antennapod
                  de.danoeh.antennapod
                  A8:54:1B:7E:6C:69:76:B0:B7:E3:A9:0B:E8:9C:63:A6:66:BE:37:3F:1D:BB:ED:A6:71:AC:2E:17:26:5D:6A:0F

                  io.ente.photos
                  37:D4:0B:10:3B:BF:86:43:EB:AE:23:B3:BB:73:F8:65:B4:E9:3A:BF:65:45:EF:37:12:8A:4C:EA:5B:C2:7E:2E

                  Can somebody show me how I can get the hash? Do I enter app info or the Github page?

                    Clark For apps you already have installed, simply open Appverifier and select "App list". For APK files you have downloaded, simply open them with Appverifier.

                      Apologies for dampening the mood, but I don't know if it is a good idea to normalise people sharing an identifying list of the apps they personally use. Of course, it is ultimately up to each person if they want to do this to help others. However if it is going to be a community effort there probably needs to be a way to do it without exposing your current app list.

                        bootloader does anybodtly have the official hash for Libre-Tube
                        (alternative YouTube frontend)

                          Pacienco when the app verifier says "success" and " this apps verification info matches an entry in the internal database. You don't need to verify normally"
                          Does this mean the filehash of the apk is verified successfully? Because on the button of the side it say's: "verification status unknown" and "since you haven't providet any verification info i'm unable to determine the verification status"

                          Both messages on the same page. This is quite confusing me.

                              UserresU " this apps verification info matches an entry in the internal database. You don't need to verify normally"

                              "Verify normally" is referring to the "verification status unknown" on the bottom. The bottom is for manual verification which you don't need to do if the hash is already confirmed in the database.

                                Pacienco Apologies for dampening the mood, but I don't know if it is a good idea to normalise people sharing an identifying list of the apps they personally use. Of course, it is ultimately up to each person if they want to do this to help others.

                                I don't understand the concern. Are you worried that this thread is creating some form of peer pressure?