Hexagon for Android

Current release

The first public release is published here at launch.

Version

—

File

hexagon-<version>.apk

Requires

Android 8.0 or newer

Machine-readable

latest.json (signed update manifest) and revocations.json, published here with the first signed release

Verify before you install

1 · SHA-256 checksum

Compare the checksum of the file you downloaded with the one published here.

sha256sum hexagon-<version>.apk
# expected: (published at launch)

2 · Signing certificate fingerprint

Every Hexagon APK and every update is signed with the same key. Check its certificate with Android’s apksigner:

apksigner verify --print-certs hexagon-<version>.apk
# Signer #1 certificate SHA-256 digest: (published at launch)

If either value does not match, do not install the file and write to support@hexagon.pm.

What you will see when installing

Hexagon needs Android 8.0 or newer.

Allow installs from your browser

The first time, Android asks you to allow installing apps from the browser you downloaded with. You can switch this off again afterwards in Settings → Apps → Special app access → Install unknown apps.

“App scan recommended”

On phones with Google Play Protect, Android may suggest scanning the app before installing it, with the options Scan app and Install without scanning. This is Android’s standard check for any app that does not come from a store, not a warning about Hexagon. Scanning is fine: if you like a second opinion, let it scan. It takes a few seconds, then you can install.

You don’t have to rely on anyone’s word, ours included: the SHA-256 checksum and the signing certificate above let you check the exact file yourself.

Updates

Hexagon checks this page for a signed update and asks before downloading anything. When you tap Update, Android’s own installer asks “Do you want to update this app?”. Android only accepts an update signed with the same certificate as the Hexagon you already have, and the app checks the file’s SHA-256 before handing it over.

Activate

1. Buy a licence key on pay.hexagon.pm (opens at launch). No account, no e-mail.
2. Install the APK (see above for the dialogs Android shows).
3. Open Hexagon and enter your key. It is checked offline and contains no personal data.