KuboCheck v1.5.1 Debug Preview

KuboCheck v1.5.1 Debug Preview

Before You Tap, KuboCheck.

Test build only. This APK is signed with an Android debug certificate and is not a production release.

Changes from v1.5.0

• Updated the in-app release checker to the renamed KubotorTech/KuboCheck repository
• Updated GitHub URL validation and unit tests for the new repository path
• Removed the previous repository name from the rebuilt APK
• Users of the v1.5.0 debug preview must install this correction manually because prereleases are intentionally excluded from in-app update checks

Included

• Advanced Security Checklist with weighted device score and donut visualization
• Local link, QR code, suspicious-message, and received-SMS analysis with plain-language reasons
• Installed-app permission review and device-security checks
• Encrypted on-device scan history, retention controls, local passphrase protection, and PDF reports
• Password and optional bring-your-own-key email exposure checks
• Manual in-app GitHub release checker under More > App updates

Installation notes

• Requires Android 8.0 (API 26) or later.
• Android must approve the sideloaded installation.
• This build can update only compatible debug builds signed with the same debug certificate.
• It must not be used as the signing foundation for a production release.

Artifact verification

• File: KuboCheck-v1.5.1-debug.1.apk
• Version: 1.5.1 (versionCode 9)
• SHA-256: 411B7F820ACFEE3992FF528200A080358ED40D7F352B735CF9AADB233FD6CC90
• Signing certificate SHA-256: 9427A21EBF2E5472413D322C0898A4843AD7D89D204D0CCFA06EB28D33E00968

No application source code is included in this release.

KuboCheck v1.5.0

KuboCheck v1.5.0 Debug Preview

Test build only. This APK is signed with an Android debug certificate and is not a production release.

Superseded by KuboCheck v1.5.1 Debug Preview. This build predates the GitHub repository rename and its in-app update check cannot validate the renamed release URLs.

Highlights

• KuboCheck branding and the "Before You Tap, KuboCheck." launch experience
• Advanced Security Checklist with weighted device score and donut visualization
• Local link, QR code, suspicious-message, and received-SMS analysis with plain-language reasons
• Installed-app permission review and device-security checks
• Encrypted on-device scan history, retention controls, local passphrase protection, and PDF reports
• Password and optional bring-your-own-key email exposure checks
• Manual in-app GitHub release checker under More > App updates

Installation notes

• Requires Android 8.0 (API 26) or later.
• Android must approve the sideloaded installation.
• This build can update only compatible debug builds signed with the same debug certificate.
• It must not be used as the signing foundation for a production release.
• Received-SMS review requires the restricted READ_SMS permission and may not qualify for Google Play distribution without an approved policy exception.

Artifact verification

• File: KuboCheck-v1.5.0-debug.1.apk
• Version: 1.5.0 (versionCode 8)
• SHA-256: CA5BA113E405D01177FAF01A388D66BAD8DAC2EA3F47C3914B7ABA1C82302632
• Signing certificate SHA-256: 9427A21EBF2E5472413D322C0898A4843AD7D89D204D0CCFA06EB28D33E00968

No application source code is included in this release.

KuboCheck v1.0.0 Debug Preview

KuboCheck legacy debug preview

This superseded test artifact is retained for compatibility and historical testing. It predates the current KuboCheck branding and may display legacy interface text. Use the newest KuboCheck prerelease for current functionality.

Included

• Link, QR-code, and suspicious-message analysis
• Advanced Security Checklist and device posture score
• App permission and risk review
• Email and password exposure checks
• Incident-response guidance and local history

Compatibility

• Minimum: Android 8.0 (API 26)
• Target: Android 14 (API 34)

Installation

Download KuboCheck-v1.0.0-debug.1.apk, allow installation from the browser or file manager when Android prompts, and open the APK.

This is a debug-signed testing build, not a production-signed release.

SHA-256: 78CA5B0F3D960A153A1E26B227B9757C71410C734AF70913335C37591CF1395D

No application source code is included in this release.