Start with the download source
Use the designated download entry linked from this website. Review the destination and the file offered there. Do not substitute a file attached to an unsolicited message or a lookalike website.
Read the Android prompt
Check the app name and the permissions Android displays. If the details do not match the app you intended to install, stop. Keep Android’s security checks enabled and follow any warning shown by your phone.
Understand the checks
- Package name
- An Android application identifier. A familiar display name does not guarantee a matching package.
- Signing certificate
- Identifies the key used to sign an app. Android uses signing identity when deciding whether one app can update another.
- SHA-256 checksum
- A fingerprint of the exact downloaded bytes. It is useful only when compared with a trusted value for the same release.
- File size
- Can help identify a partial download when compared with a trusted release reference. Size alone does not establish safety.
When to stop
Stop if the app identity differs, the download is incomplete, Android reports a conflict, or a source asks you to disable security protections. Ask support about the exact warning before continuing.