sideloading APKs from 3rd party stores - General Questions and Answers

Hi,
since I dont have Google APIs and no play store installed, I rely on 3rd party web sites like APKpure to obtain software like Firefox.
I noticed one thing, I downloaded Firefox latest stable version and on all platforms, APKmirror, APKpure and apps.evozi.com they all had different hash sums!
What service would you trust most?
Apps.evozi.com doesnt work any longer, APKmirror says they check signatures.
What do you say?
I dont want to mess with sensitive banking data and dont want modified software.
Thanks!!!

APKmirror and APKpure should be fine since they check developer's certificate so you know you don't download edited packages (unless private key would be stolen of course). No idea about Evozi since it does not allow me to download anything at the moment.
As for APK checksums, I compared Firefox Beta 85.0.0-beta.4 :
SHA1 cheksums for arm64-v8a from:
Google Play - f03f796410e5dfd46eb8da25851f81850011a2d4
APKmirror - 2aebaf058c30f5fe0ff61a3a2ec7676efa519479
APKpure - f03f796410e5dfd46eb8da25851f81850011a2d4
So APKmirror indeed differs but I think there are multiple versions even across same architecture. Signature is the same so personally I would trust both. APKmirror shows nodpi, but APKpure - 120-640dpi, maybe that's the difference?
Signature for GooglePlay, APKmirror and APKpure is the same - 920f4876a6a57b4a6a2f4ccaf65f7d29ce26ff2c (SHA1, manually checked with keytool.exe)

My recommendation: Use Yalp Store what is another unique app store. It uses Google Play Store APKs but you get them without the actual Google Play Store. You can search for, install, and update apps directly from the source and I quite like that.
More info here:
Yalp Store | F-Droid - Free and Open Source Android App Repository
Download apks from Google Play Store
f-droid.org

Related

yalpstore( bypass bloated Google play) questions

I just found yalpstore on fdroid.
This is from their github
What does it do?
Yalp Store lets you download apps from Google Play Store as apk files. It searches for updates of installed apps when it starts and lets you search for other apps. Thats it. Yalp saves downloaded apks to your default download folder so you can later open it in your favorite file manager app and tap each one to install the apps.
Why would I use it?
If you are content with Google Play Store app, you will not need this app.
The point of Yalp Store is to be small and independent from Google Services Framework. As time passed, Google Services Framework and Google Play Store apps grew in size, which made them almost too big for old phones (Nexus One has 150Mb memory available for apps, half of it would be taken by Google apps). Another reason to use Yalp Store is if you frequently flash experimental ROMs. This often breaks gapps and even prevents their reinstallation. In this situation Yalp will still work.
How does it work?
Yalp Store uses the same (protobuf) API the android Play Store app uses. You are going to need a google account to use it. Please, keep in mind that technically Yalp Store violates Android Market Terms of Service (§3.3). In theory, you might get your account disabled by using Yalp Store. Thats why you might want to register a separate gmail account and use it at least once to log in to the Play Store android app on any device.
In practice, though, software like Yalp, Google Play Crawler and Raccoon has been used for years and it seems to be safe.
Yalp Store is derived from the following projects:
https://github.com/Akdeniz/google-play-crawler
https://github.com/onyxbits/Raccoon
Has anyone any experience with this app?
I usually strip Google play from ask my devices except one that I use to get apps I need.
This might be a way to dump Google from that device also.
But I'm not a programmer so I can't audit the code for issues
(Our much more than use netstat to check what apps connect where)
So the more info out there the better
nutpants said:
I just found yalpstore on fdroid.
This is from their github
What does it do?
Yalp Store lets you download apps from Google Play Store as apk files. It searches for updates of installed apps when it starts and lets you search for other apps. Thats it. Yalp saves downloaded apks to your default download folder so you can later open it in your favorite file manager app and tap each one to install the apps.
Why would I use it?
If you are content with Google Play Store app, you will not need this app.
The point of Yalp Store is to be small and independent from Google Services Framework. As time passed, Google Services Framework and Google Play Store apps grew in size, which made them almost too big for old phones (Nexus One has 150Mb memory available for apps, half of it would be taken by Google apps). Another reason to use Yalp Store is if you frequently flash experimental ROMs. This often breaks gapps and even prevents their reinstallation. In this situation Yalp will still work.
How does it work?
Yalp Store uses the same (protobuf) API the android Play Store app uses. You are going to need a google account to use it. Please, keep in mind that technically Yalp Store violates Android Market Terms of Service (§3.3). In theory, you might get your account disabled by using Yalp Store. Thats why you might want to register a separate gmail account and use it at least once to log in to the Play Store android app on any device.
In practice, though, software like Yalp, Google Play Crawler and Raccoon has been used for years and it seems to be safe.
Yalp Store is derived from the following projects:
https://github.com/Akdeniz/google-play-crawler
https://github.com/onyxbits/Raccoon
Has anyone any experience with this app?
I usually strip Google play from ask my devices except one that I use to get apps I need.
This might be a way to dump Google from that device also.
But I'm not a programmer so I can't audit the code for issues
(Our much more than use netstat to check what apps connect where)
So the more info out there the better
Click to expand...
Click to collapse
Im not a programmer neither, but im using Yalp Store since few weeks and everything seems fine. Im using it with a fake google account, not main one.
New update have credential access yalp store without need to have an account (experimental) but for me don't work..
Has not anyone tried it?
Regards.
Update: problem solved disabling signature check
I get an network.error when logging in with yalp account every time.
(LineageOS 13 and 14 without gapps)
Maybe anybody have an idea or solution?
Thanks

APKPure vs Aurora Store

Hi,
I have both installed on my phone. I was wondering what's the difference between the two? Should I use APKPure to download some apps because they are not coming from Google Server,, so less safer(?). While Aurora Store I heard is linking directly from Google Play Store..(safer?) I can also go to Play Store but which means I need to unfreeze using Icebox. Which is extra 30min of work every few days.
Cheers
Apkpure seems to be where most the apps are recommended even by Huawei Petal Search
At least search for apps using petal search (via app gallery)
Then let Apkpure do the updates
Having looked at options, I mean with app gallery there is an app called petal search which will eradicate the need for alternative apk platforms, its a hub which searches all other hubs for you, kinda like toys R us

Are the apks available on apkpure website safe and reliable?

For example, on the detailed page of apkpure website for 'Google Chrome browser', I noticed that the field value of 'uploaded by' is someone else other than 'Google LLC'.
So, I wonder whether this apk is safe and reliable enough to download and install on Android devices. Have apkpure finished some security check? ......
As we know, Google Play Store is unavailable on Android devices in some countries. These Android users have to download their apks in order to install some apps.
Thanks for your comments and advices in advance.
James_Watson said:
For example, on the detailed page of apkpure website for 'Google Chrome browser', I noticed that the field value of 'uploaded by' is someone else other than 'Google LLC'.
So, I wonder whether this apk is safe and reliable enough to download and install on Android devices. Have apkpure finished some security check? ......
As we know, Google Play Store is unavailable on Android devices in some countries. These Android users have to download their apks in order to install some apps.
Thanks for your comments and advices in advance.
Click to expand...
Click to collapse
I don't use apkpure so much but the apks are verified before uploading usually. Users upload apks, apkpure checks if it's safe an then publish it. I can't confirm they do it 100% at apkpure, but I can with Apkmirror. It's a very serious website (Affiliated with Android Police) that host very popular apks like paphonb ported apks and other cool stuff. I use this rather than apkpure
Raiz said:
I don't use apkpure so much but the apks are verified before uploading usually. Users upload apks, apkpure checks if it's safe an then publish it. I can't confirm they do it 100% at apkpure, but I can with Apkmirror. It's a very serious website (Affiliated with Android Police) that host very popular apks like paphonb ported apks and other cool stuff. I use this rather than apkpure
Click to expand...
Click to collapse
Okay, thank you very much for your comments and ideas about apkmirror. I will have a try. :good:

Download and install apk privacy over aurora

Hi,
please please please have patient with with as i’m still on iphone waiting to sell it and buy android (after @5 years on apple ecosystem)
Before that, last android phone, i had note 3, rooted ...
My question is about having a degoogled phone with lineageos without any google service instaled (not even aurora that, from what i understood, can be installed via fdroid and used to install play apps) and use no more google/facebook services (e.g whatsapp).
The question: can i download an apk file from google store via a laptop (e.g: revolut, or other banks apps) upload them to the phone and install them?
If this will work, will be privacy compromised?
Is this safer than installing via aurora?
Another question: lets say ill use k9 mail for my gmail account. Will this help google target my phone in any way knowing at least my phone ip ?
Regards,
With Aurora ( a fork of Yalp ) app you download/update apps directly from the Google Play Store without a Google account.
Aurora is open-source hence you must not fear your Android gets compromised by it.
Downloading an app from 3rd-party websites - means not from Google Play Store - and installing it always carries the risk that malicious software is installed.
Note: Apps may not work if you uninstall Google Play Services.
jwoegerbauer said:
With Aurora ( a fork of Yalp ) app you download/update apps directly from the Google Play Store without a Google account.
Aurora is open-source hence you must not fear your Android gets compromised by it.
Downloading an app from 3rd-party websites - means not from Google Play Store - and installing it always carries the risk that malicious software is installed.
Note: Apps may not work if you uninstall Google Play Services.
Click to expand...
Click to collapse
Thank your for your answer.
If it will not work, then I'll skip the app
Thank you again

Install Google apps in Lineageos

Hello,
How can i install basics Apps in Lineageos.
So Google Play Store can works
Then i just installed Google Play Store / then the app crash right after start.
with service does i have to install? (APK files)
Thank for your time.
The Open GApps Project
OpenGApps.org offers information and pre-built packages of The Open GApps Project. The Open GApps Project is an open-source effort to script the automatic generation of up-to-date Google Apps packages. All Android versions and platforms supported.
opengapps.org
Download the file according to your android version and architecture and flash it.
GApps & Google Play Store app are completely different softwares. Google Play Store app doesn't depend on GApps.
You can use different Gapps build, if I could recommend some, I would recommend Bitgapps or Nikgapps, the smallest packages. You only need to try to find the one that makes you feel better.
But how can i install Gogole play store on my Lineageos? i'm useing Lineageos 18 not official
The app keep crashing do i need some other apps for get "Gogole Play Store" to work?
007fred62 said:
But how can i install Gogole play store on my Lineageos? i'm useing Lineageos 18 not official
The app keep crashing do i need some other apps for get "Gogole Play Store" to work?
Click to expand...
Click to collapse
To succesfully run Google Play Store the Core GMS Packages must got installed before. The GMS stands for “Google Mobile Services”. Those are at least
Google Account Manager APK
Google Services Framework APK
Google Play Services APK
jwoegerbauer said:
To succesfully run Google Play Store the Core GMS Packages must got installed before. The GMS stands for “Google Mobile Services”. Those are at least
Google Account Manager APK
Google Services Framework APK
Google Play Services APK
Click to expand...
Click to collapse
Now i got a new problem / Play Protect certified
How to fix "Device is not Play Protect certified" error - Technobaboy
If you are having the "Device is not Play Protect certified" errors, here is one way to fix the problem. Hopefully, this works for you.
www.technobaboy.com
I have insert GSF code, but they say wait a while but nothing happen
How can that be fixed?
How to disable Google Play Protect in detail is described here:
How to disable "Google Play Protect"?
Google has added a security system for apps that are not downloaded from the Google Play called "Play Protect". It is possible that the Mobile Tracker Free application is detected as potentially da...
support.mobile-tracker-free.com
jwoegerbauer said:
How to disable Google Play Protect in detail is described here:
How to disable "Google Play Protect"?
Google has added a security system for apps that are not downloaded from the Google Play called "Play Protect". It is possible that the Mobile Tracker Free application is detected as potentially da...
support.mobile-tracker-free.com
Click to expand...
Click to collapse
I have try that, it says (This devices isn't Play Protect certified)
still the same issuse
007fred62 said:
I have try that, it says (This devices isn't Play Protect certified)
still the same issuse
Click to expand...
Click to collapse
Getting the Google Play Protect status message "This device isn't Play Protect certified" simply informs you that
Your phone may not get Android system updates or app updates.
Google apps on your phone that aren't Play Protect certified aren't licensed and may not be real Google apps.
Apps and features on your phone that aren't Play Protect certified may not work correctly.
Data on your phone that aren't Play Protect certified may not back up securely.
That's all.

Categories

Resources