Auditor (GrapheneOS variant)

Validate device security with hardware-based integrity and identity verification

Daniel Micay · app.attestation.auditor

Not rated yet 10K+ downloads v78 3 MB Android 10+ PEGI 3 · Everyone

Download APK 3 MB All versions

Same certificate as the other version checked Details

Auditor (GrapheneOS variant) screenshot 1

Auditor (GrapheneOS variant) screenshot 2

Auditor (GrapheneOS variant) screenshot 3

Auditor (GrapheneOS variant) screenshot 4

At a glance

Latest version: v78 (78)
Updated: Feb 12, 2024 (2 years ago)
APK size: 3 MB
Requires: Android 10+ (API 29)
CPU support: x86 32-bit, x86 64-bit, ARM 32-bit, ARM 64-bit
Category: Tools (app)
Listed since: Mar 19, 2021 (at least)
Permissions: 8 (2 sensitive)
Website: attestation.app
Developer contact: [email protected]
Privacy: Developer's privacy policy

About this APK

Auditor (GrapheneOS variant) is an app by Daniel Micay in the Tools category, listed since at least March 2021. It includes native code for x86 32-bit, x86 64-bit, ARM 32-bit and ARM 64-bit, so it runs on practically every phone.

Since version 66, the minimum Android version rose from 8.0 to 10. It asks for 8 permissions, 2 of them sensitive: camera and see all installed apps. Compared with version 66, it adds 1 new permission: “View network connections”.

What's new in v78

Notable changes in version 66: • update CameraX library to 1.3.0-alpha01 • update ZXing library to 3.5.1 • update Kotlin Gradle plugin to 1.7.21 • remove obsolete lint workarounds See https://github.com/GrapheneOS/Auditor/releases/tag/66 for the release notes.

Description

From the listing uploaded by “ss0869”.

The Auditor app uses hardware security features on supported devices to validate the integrity of the operating system from another Android device. It will verify that the device is running the stock operating system with the bootloader locked and that no tampering with the operating system has occurred. It will also detect downgrades to a previous version. Supported devices: See for a list of devices which can be verified by using them as the Auditee. It cannot be bypassed by modifying or tampering with the operating system (OS) because it receives signed device information from the device's Trusted Execution Environment (TEE) or Hardware Security Module (HSM) including the verified boot state, operating system variant and operating system version. The verification is much more meaningful after the initial pairing as the app primarily relies on Trust On First Use via pinning. It also verifies the identity of the device after the initial verification. See for detailed usage instructions. This is included as the Help entry in the app menu. The app also provides basic guidance through the process. See for a more detailed overview.

Version history

2 versions are listed, going back to v66. Since v78 it requires Android 10+.

v78 LATEST Feb 12, 2024 3 MB TRUSTED v66 Nov 29, 2022 2.8 MB TRUSTED

All 2 versions

Security & authenticity

Security rating: Trusted

Signing certificate

Certificate issued to “Daniel Micay” The developer's name — though anyone can put any name in a certificate.
Same certificate as the other version checked

Store checks and file details

Developer signature verified Feb 12, 2024
Antivirus scan result not available
Signed byCN=Daniel Micay
Signing certificate (SHA-1)FB:6A:EF:9D:0C:B6:4C:59:32:F7:89:D5:AC:52:48:E1:24:FA:04:6D
File MD540325528f07482e5065ef68b1e4b114c
Uploaded by “ss0869” 10 followers · uploading since 2023

Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures (1 other version compared). AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.

Permissions (8)

Auditor (GrapheneOS variant) requests 8 permissions, 2 of them sensitive.

Camera Sensitive android.permission.CAMERA
See all installed apps Sensitive android.permission.QUERY_ALL_PACKAGES
Full network access android.permission.INTERNET
Internal broadcast protection (app-defined) app.attestation.auditor.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Run at startup android.permission.RECEIVE_BOOT_COMPLETED
Show notifications android.permission.POST_NOTIFICATIONS
Use biometric hardware android.permission.USE_BIOMETRIC
View network connections android.permission.ACCESS_NETWORK_STATE

Required hardware & features

Camera android.hardware.camera
Basic touch input android.hardware.faketouch

Auditor (GrapheneOS variant) APK: questions and answers

Is there a version of Auditor (GrapheneOS variant) for older Android phones?

The current version needs Android 10 or later. Version 66 is the newest listed build that installs on Android 8.0 and later. It is an old build: apps that rely on online services may no longer connect when they are this old. Get version 66 · All versions

Can I install this APK over the version I already have?

Only if it is signed with the same certificate as the copy on your phone and isn't an older version. If Android says “App not installed”, the certificates differ; uninstalling your copy first works but deletes its data unless it is backed up.

Is the Auditor (GrapheneOS variant) APK safe?

No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. It is signed with the same certificate as the other version checked. After downloading, check that the file's MD5 is 40325528f07482e5065ef68b1e4b114c.