Verify your download
So no one can slip you a tampered app, you can check two things: that it's signed by us (the real guarantee) and that the file is exactly the one we published.
1. Signature fingerprint (the real guarantee)
All our APKs are signed with the same key. Android requires that signature on install and rejects any update with a different signature: that's why a tampered app CANNOT be installed over yours. This is the fingerprint (SHA-256) of our signing certificate; it's the same across all versions:
Check it with: apksigner verify --print-certs militar-v3.0.xx.apk (it will give a "certificate SHA-256 digest": it must match the one above).
2. File SHA-256
Additionally, this is the SHA-256 hash of each build. It confirms the downloaded file is identical to what we published, without a single changed byte.
How to check it
- Windows:
certutil -hashfile militar-v3.0.xx.apk SHA256 - Linux / Mac:
sha256sum militar-v3.0.xx.apk - Android: a hashing app (e.g. "Hash Droid") on the downloaded APK.
The value you get must match, character by character, the one on this page.
Honest note: this hash is published on our server. If someone fully compromised the server, they could change the APK and its hash at the same time. That's why the strongest guarantee is the SIGNATURE (our key is offline): that fingerprint can't be forged by anyone without the key, and Android always checks it.