Safeguard
Developer Tools•

Install the Safeguard Android APK and verify its checksum

Install Safeguard on Android from Google Play or the direct APK, and check the SHA-256 hash before you install. Commands for Mac, Linux and Windows.

Safeguard Security Team
3 min read

You can install Safeguard on Android from Google Play, or download the APK from safeguard.sh/download. If you take the APK, compare its SHA-256 hash with the one on the download page before installing. The hash proves the file you got is the file that was published, and it takes under a minute.

Pick your route

The download page lists two Android options: the Google Play listing, and a direct file, Safeguard-1.0.2.apk, about 69 MB at the time we checked. The page says phones and tablets are the audience and lists no minimum Android version, so check that on your device if you have an older one.

One detail matters for the APK route: the page says updates for the APK come from the download page, not from Google Play. If you sideload, you own the update habit. If you want updates handled for you, use Google Play. The separate decision guide covers that choice.

Verify the hash

The download page publishes a SHA-256 for the APK. Copy the full value from the page, not a truncated one. Then compute the hash of your downloaded file.

On macOS:

shasum -a 256 Safeguard-1.0.2.apk

On Linux:

sha256sum Safeguard-1.0.2.apk

On Windows PowerShell:

Get-FileHash .\Safeguard-1.0.2.apk -Algorithm SHA256

Compare the output to the page, character by character, or paste both into a diff tool. Case does not matter for hex. If they differ by even one character, delete the file and download again. If it still differs, stop and contact support rather than installing.

You can also download on a computer, verify there, then move the file to the phone over a cable or a trusted transfer. That way you never install a file you have not checked.

Install on the phone

  1. Open the downloaded file from your browser or file manager.
  2. When Android asks, allow installs from that app (your browser or file manager). The page notes this prompt.
  3. Confirm the install.
  4. Open Safeguard and sign in with your Safeguard account.

Afterwards, go back to Settings and turn the "install unknown apps" permission off for that browser. Leaving it on is a standing risk for no benefit.

Installing from a computer

If you have Android platform tools set up and USB debugging enabled, you can install with:

adb install Safeguard-1.0.2.apk

This is optional. Most people will not need it.

Why bother with a hash

A hash check guards against a corrupted download and against a file swapped in transit or on a mirror. It does not tell you the publisher is trustworthy, so only compare against the value on the official page, reached by typing the address yourself.

Quick check

Does the APK update itself from Google Play?

No. The download page says updates for the APK come from the download page, not from Google Play.

What if the hash does not match?

Do not install. Delete the file, download again from the official page, and compare again. If it still does not match, contact Safeguard support.

Sources

Last reviewed: 19 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.