Installing the App

Installing the App

The app is published as a signed APK on the repository's Releases page. It runs on Android 8.0 (API 26) and newer.

Install

1. On your phone, open the latest release and tap the .apk file under Assets to download it.
2. Open the downloaded file from the notification or your Downloads folder.
3. If Android says your browser or file manager is not allowed to install apps, tap Settings, turn on Allow from this source, and go back.
4. Tap Install, then Open.

Android may show a Play Protect notice for an app that does not come from the Play Store. The app is signed and its source is public in this repository; choose Install anyway (or More details → Install anyway).

Check that the APK is genuine (optional)

Each release lists the APK's SHA-256 checksum. Every release is also signed with the same certificate, whose SHA-256 fingerprint is:

11:39:B7:92:CA:48:CF:12:88:0D:10:64:F3:40:19:DC:7F:8B:F3:94:34:B0:1A:45:DA:0C:07:06:81:FA:A5:B9

On a computer with the Android SDK build tools:

apksigner verify --print-certs BookStoreBD-<version>.apk

The line Signer #1 certificate SHA-256 digest should match the fingerprint above, without the colons.

Updates

• The app checks for a new release at most once a day and offers it once, with what is new.
• Tap Install and the app downloads the update, checks its SHA-256, and hands it to Android, which asks you to confirm.
• The first time, Android asks you to allow BookStoreBD to install updates. Turn on Allow from this source and go back.
• To check at any time: Account → Updates → Check.

Android only installs an update signed with the same certificate as the installed app, so updates can only come from this repository's releases.

Uninstall

Long-press the BookStoreBD icon and choose Uninstall, or go to Settings → Apps → BookStoreBD → Uninstall. Your account, orders, cart and wishlist stay on the server and are there again when you sign in, in the app or on the website.