v0.2.1

BitHanko 0.2.1 and Signer Lockdown 0.6.1.

Warning: This is experimental software. It has not been audited and comes with no warranty. Keep amounts small.

Security: Signer Lockdown 0.6.0 and earlier did not keep airplane mode on (#64)

Applying the restrictions made Android turn airplane mode off and keep it off, so a locked phone with a SIM card went back online. Lockdown set DISALLOW_AIRPLANE_MODE, which Android treats as "airplane mode is not allowed", not as "keep it as it is".

If you use Lockdown:

1. Update Lockdown to 0.6.1 (Update an app from an SD card, or from a PC over USB). Opening it clears the old restriction
2. Take out the SIM card and turn on airplane mode
3. Tap Apply restrictions again

Lockdown 0.6.1 no longer claims to hold airplane mode on, since Android lets no app do that. Instead it leaves the radios nothing to join: it applies only with no SIM card, keeps the Wi-Fi and Bluetooth settings locked, forgets saved Wi-Fi networks, and disables quick settings while locked. Airplane mode can still be turned off in Settings.

BitHanko itself is unchanged apart from the version.

File	What it is
bithanko-v0.2.1.apk	BitHanko (0.2.1), universal APK for arm64 and ARMv7
signer-lockdown-v0.2.1.apk	Signer Lockdown (0.6.1), with BitHanko above inside
provisioning-v0.2.1.png	QR code to set up Lockdown from a factory-reset phone's welcome screen
SHA256SUMS	SHA-256 of the files above

Both APKs are signed with the same release key as before (certificate SHA-256 1bfe7c66768f8056348ddc0e2366aef76616ec7d09e952ba48b700576b5bbc55).

Web app build: 6a91fe112c32 (Settings › This build)

v0.2.0

BitHanko 0.2.0 and Signer Lockdown 0.6.0. The signer is now called BitHanko, and lives at bitwasm-project/bit-hanko.

Warning: This is experimental software. It has not been audited and comes with no warranty. Keep amounts small.

Renamed to BitHanko (#51)

• The Android app is now app.bithanko and Signer Lockdown app.bithanko.lockdown. They install next to v0.1.x as different apps, so keys saved by v0.1.x do not carry over.
• The web app, demo, installer page and guide moved to https://bitwasm-project.github.io/bit-hanko/. The old habakan.github.io address no longer works, and a web app added from it does not see the new one's keys.

Web app for iPhone (new)

• Add the signer to the home screen from Safari and use it offline. It stays on the build it cached until you choose to update (#31, #32, #43).
• QR codes are read inside the signing engine (#33), and the build is reproducible from your own fork (#34).
• Optionally save keys sealed with a passkey, on iOS 18 or later with an Apple Account (#35, #37, #39, #44).
• Recovery words are typed on the app's own keys, laid out as on Android (#38, #40, #41).
• The header and action buttons stay still while a screen scrolls (#48).

Signer

• The passphrase screen shows the fingerprint with and without the passphrase before loading, and can show the words as a SeedQR (#26, #42).
• Full screens for the passphrase and the address check (#28), and the app icon in the top bar (#29).
• Clearer Japanese wording (#47).

Installer page

• Waits for the phone to be free before installing (#25).

Guide

• The guide is published with the demo running beside the text, and setup is split into choosing how to install, how to configure, step-by-step quick starts and security (#27, #46, #50).

File	What it is
bithanko-v0.2.0.apk	BitHanko (0.2.0), universal APK for arm64 and ARMv7
signer-lockdown-v0.2.0.apk	Signer Lockdown (0.6.0), with BitHanko above inside
provisioning-v0.2.0.png	QR code to set up Lockdown from a factory-reset phone's welcome screen
SHA256SUMS	SHA-256 of the files above

Both APKs are signed with the same release key as v0.1.x (certificate SHA-256 1bfe7c66768f8056348ddc0e2366aef76616ec7d09e952ba48b700576b5bbc55).

Moving from v0.1.x

• Keep your written recovery words at hand: keys saved by v0.1.x stay in the old app and are not moved.
• Without Lockdown: install BitHanko, load your key again, then uninstall the old signer.
• With Lockdown: the old Lockdown cannot install apps under the new names. Factory reset the phone and set it up again with Lockdown 0.6.0.

Install

• Over USB without a network: open the installer page, choose the APK and SHA256SUMS.
• With the QR code: see docs/lockdown.md.

v0.1.1

Signer 0.1.1 and Signer Lockdown 0.5.0.

Warning: This is experimental software. It has not been audited and comes with no warranty. Keep amounts small.

Signer

• Choosing what to share with a wallet app, a saved key, or a SeedQR format now happens on full screens. The public key export is one screen, with every format shown with its address prefix (#16).
• Multisig, message signing and child mnemonics moved under Advanced (#17).
• Android's back button returns to the previous screen instead of closing the app and wiping the key (#23).
• The animated QR on iOS fits the screen instead of being clipped (#16).

Signer Lockdown

• Update the signer or Lockdown from a PC over a USB cable, with the restrictions kept on. Only USB file transfer is allowed, and only while the dialog is open. The signer is force-stopped first (#19).
• On Android 11 and later, Lockdown now sees the signer, so the update buttons work (#19, #22).
• Installing and updating show progress, and the screen no longer freezes while an APK is checked (#20).
• The hidden app count includes only installed apps (#22). There is no longer a second title bar (#21), and the page no longer turns gray after a key press (#21).

Installer page

• Shows each step (connect, check, install with percentage, device owner) while it works (#20).

File	What it is
bitwasm-signer-v0.1.1.apk	The signer (0.1.1), universal APK for arm64 and ARMv7
signer-lockdown-v0.1.1.apk	Signer Lockdown (0.5.0), with the signer above inside
provisioning-v0.1.1.png	QR code to set up Lockdown from a factory-reset phone's welcome screen
SHA256SUMS	SHA-256 of the files above

Both APKs are signed with the same release key as v0.1.0 (certificate SHA-256 1bfe7c66768f8056348ddc0e2366aef76616ec7d09e952ba48b700576b5bbc55). Updating over 0.1.0 keeps keys saved on the phone.

Update from v0.1.0

• With Lockdown 0.4.0, use Update an app from an SD card (an SD card or USB stick). Update Lockdown first to get the USB cable option, then the signer.
• Check the version and SHA-256 shown against SHA256SUMS before tapping Update.
• Keep your written recovery words at hand. Never uninstall the signer to get past an install error; that erases the keys saved on the phone.

Install

• Over USB without a network: open the installer page, choose the APK and SHA256SUMS.
• With the QR code: see docs/lockdown.md.

v0.1.0

First release of the bitwasm-signer Android app and Signer Lockdown.

Warning: This is experimental software. It has not been audited and comes with no warranty. Keep amounts small.

File	What it is
bitwasm-signer-v0.1.0.apk	The signer (0.1.0), universal APK for arm64 and ARMv7
signer-lockdown-v0.1.0.apk	Signer Lockdown (0.4.0), with the signer above inside
provisioning-v0.1.0.png	QR code to set up Lockdown from a factory-reset phone's welcome screen
SHA256SUMS	SHA-256 of the files above

Both APKs are signed with the same release key (certificate SHA-256 1bfe7c66768f8056348ddc0e2366aef76616ec7d09e952ba48b700576b5bbc55).

Install

• Over USB without a network: open the installer page, choose the APK and SHA256SUMS. It can set up Lockdown, or install just the signer.
• With the QR code: see docs/lockdown.md.

What has been checked on a phone is listed in the README.