DenDen for Android

The Android app will soon come straight from this website, without Google Play. The file will be signed, and before you install it you can check that it really comes from us.

Coming soon

The Android file is not published yet. As soon as it is, it will be here, together with its checksum.

The checksums

Version: not published yet
Version code: not published yet
Size: not published yet
Published: not published yet
SHA-256 of the file: not published yet
SHA-256 of the signing certificate: D9:11:15:C6:1E:D9:B1:32:32:13:52:FE:86:3D:00:29:DD:27:03:51:6A:0E:CC:FB:B5:45:B0:B5:50:6D:DD:F4
The first eight pairs of the fingerprint, large, for reading out on the phone or comparing with a family member:

SHA-256 is a checksum: a long number computed from the contents of a file. Change a single bit and it looks completely different.

How to install the app

Download the file on your phone
Open this page on your Android phone and tap "Download APK". The file ends up in your downloads.
Allow installing from this source
When you open the file, Android asks whether your browser (or your files app) may install apps. Tap "Settings" and allow it for that one app. Depending on the manufacturer the option is called something like "Install unknown apps" or "Allow from this source". After installing you can switch the permission off again.
The Play Protect warning
Google Play Protect may warn that the app is unknown or did not come from Google Play. That happens with every app that is not distributed through Google Play: the warning means Google does not know the app, not that something harmful was found. What it looks like depends on the Android version and manufacturer. Usually "More details" leads to "Install anyway". Check the checksum first if you can.
Install and set up
Tap "Install" and open DenDen. To set it up you need an invite or access code.

Check before you install

If you have a computer, this is how you work out the checksum of the downloaded file. It must match the value above character for character.

Mac or Linux, in the terminal:

shasum -a 256 denden.apk

Windows, in the command prompt:

certutil -hashfile denden.apk SHA256

With the Android tools (apksigner from the Android SDK Build-Tools) you can also see who signed the file. The line "Signer #1 certificate SHA-256 digest" must match the fingerprint above (shown there without colons and in lower case).

apksigner verify --print-certs -v denden.apk

d91115c61ed9b132321352fe863d0029dd2703516a0eccfbb545b0b5506dddf4

How updates work

The app checks by itself whether a new version exists and tells you. It never installs anything on its own.
To update, download the new file from this page and install it over the existing app. Your data stays as long as the new file is signed with the same key. Android checks that itself and refuses an update signed with a different key.
Do not uninstall the app to update it: uninstalling makes Android delete the app's data on the phone. If an update does not work, write to us first.

Why the first download matters

Android does not check who signed an app the first time you install it. It remembers the key and from then on only accepts updates signed with the same key. So the first download is the moment when checking helps most.