###### **Your Cheat Sheet to Installing Android Apps the Privacy Respecting Way: From Direct Sources to Google Play Store**
**1. Direct from Developer**
- Get APKs directly from GitHub, GitLab, or Codeberg etc. using Obtanium
- If the app is on Accrescent, use Accrescent
**2. F-Droid**
Use only in these cases:
- When it's the developer's chosen release channel
- When no other distribution option exists
Most devs will put F-Droid instructions or a download button on their Git page or website. Use the developer's official F-Droid release repository or recommended repository whenever available (eg: many devs use IzzyOnDroid F-Droid repo for their releases instead of creating their own).
**When using F-Droid:**
- Use the official "**F-Droid Basic**" client
- Benefits: Automatic background updates without privileged extension or root
- Enhanced security through reduced feature set and attack surface
- Do not use alternative clients like Neo Store
**3. Google Play Store**
Use only if the app is unavailable through any other official channel.
Some prefer to use Aurora Store (a Google Play Store client which does not require a Google account, Google Play Services, or microG to download apps).
This is threat model and usecase dependent.
I prefer to just use Google Play since I have it installed on GrapheneOS where I use some paid apps not available anywhere else, and I want to keep all of my apps all in one place.
(Optional) Create an anonymous Gmail account and use it for Google Play.
---
*Note: This approach aligns with PrivacyGuides and GrapheneOS recommendations, as well as modern security standards. Third-party F-Droid clients are not recommended.*
```
#Ikitao #OPSEC #Privacy #Android #GrapheneOS
Ava ॐ
npub1f6…azcka
2024-11-23 19:22:19
Author Public Key
npub1f6ugxyxkknket3kkdgu4k0fu74vmshawermkj8d06sz6jts9t4kslazckaPublished at
2024-11-23 19:22:19Event JSON
{
"id": "bb9405021e8e2a05ef9e7d8bd4d6116d89f149e88714ae543a6d155eea2f76e0",
"pubkey": "4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d",
"created_at": 1732389739,
"kind": 1,
"tags": [
[
"t",
"Ikitao"
],
[
"t",
"ikitao"
],
[
"t",
"OPSEC"
],
[
"t",
"opsec"
],
[
"t",
"Privacy"
],
[
"t",
"privacy"
],
[
"t",
"Android"
],
[
"t",
"android"
],
[
"t",
"GrapheneOS"
],
[
"t",
"grapheneos"
]
],
"content": "###### **Your Cheat Sheet to Installing Android Apps the Privacy Respecting Way: From Direct Sources to Google Play Store**\n\n**1. Direct from Developer**\n- Get APKs directly from GitHub, GitLab, or Codeberg etc. using Obtanium\n- If the app is on Accrescent, use Accrescent\n\n**2. F-Droid**\n\nUse only in these cases:\n- When it's the developer's chosen release channel\n- When no other distribution option exists\n\nMost devs will put F-Droid instructions or a download button on their Git page or website. Use the developer's official F-Droid release repository or recommended repository whenever available (eg: many devs use IzzyOnDroid F-Droid repo for their releases instead of creating their own).\n\n**When using F-Droid:**\n- Use the official \"**F-Droid Basic**\" client\n - Benefits: Automatic background updates without privileged extension or root\n - Enhanced security through reduced feature set and attack surface\n- Do not use alternative clients like Neo Store\n\n**3. Google Play Store**\n\nUse only if the app is unavailable through any other official channel.\n\nSome prefer to use Aurora Store (a Google Play Store client which does not require a Google account, Google Play Services, or microG to download apps).\n\nThis is threat model and usecase dependent.\n\nI prefer to just use Google Play since I have it installed on GrapheneOS where I use some paid apps not available anywhere else, and I want to keep all of my apps all in one place.\n\n(Optional) Create an anonymous Gmail account and use it for Google Play.\n\n---\n\n*Note: This approach aligns with PrivacyGuides and GrapheneOS recommendations, as well as modern security standards. Third-party F-Droid clients are not recommended.*\n```\n\n#Ikitao #OPSEC #Privacy #Android #GrapheneOS",
"sig": "78f9c9b3fe79b6fc98b355a87fda65502d80b3b64d03127015fec07a112989bde4f690fb338a6c7c99fdd8dbecba424acda127d43a4e8487a36fbe232ef93caa"
}