MEGA Beta v0.1.8
MEGA beta v0.1.8 focuses on Advanced Mode multisig workflows, QR scanning, saved vaults, and security hardening. This is still experimental beta software for disposable test roll sequences only; do not use it to protect meaningful funds.
APKs
Primary APK for fresh installs:
mega-beta-v0.1.8.apk- SHA-256:
39f2339e466298a056dd978f3304bbbb9180f059eee0fd620c417b24b5538d16 - Release-type, non-debuggable APK signed with the MEGA beta release key.
Debug-compatible APK for existing testers:
mega-beta-v0.1.8-debug-compat.apk- SHA-256:
e302302a73175af9ec724b10d460d8d2363514b3825e8c3b23c0aa2e523e823c - Use this only if Android refuses to update an older debug-signed MEGA test install with
App not installed. Fresh installs should use the primary APK.
Highlights
- Advanced Mode now has Multi-Signature Vaults with M-of-N setup, saved-session cosigner derivation, paste import, QR scan import, saved vault list/detail, descriptor QR, first receive address, and PDF export.
- Bare xpub/tpub imports now offer a helper to complete missing cosigner origin info instead of failing with a raw parser error.
- PIN reuse across Saved Sessions and Advanced Mode saved-session import now respects the configured timeout window.
- Added release-signing verification, app-layer unit tests, QR hardening, clipboard/passphrase/input hardening, and duress/session-delete improvements.
- README and beta-testing docs now explain the primary APK, debug-compatible APK, multisig test path, and release signing model.
Verification run before release
./gradlew :app:testDebugUnitTest./gradlew test lint securityAudit assembleDebug./gradlew assembleRelease verifyReleaseArtifact
verifyReleaseArtifact passed: the release APK is non-debuggable, signed by the expected beta signer, and declares no forbidden network/storage permissions. CAMERA is present only for local QR scanning.