App must be installed over the Google Play store now

[Koenigseder]

Before submitting a new issue

• I checked for app updates and the bug is present in the latest version.
• I checked the status page and the issue is not listed there.
• I checked for possible duplicate issues, but couldn't find any.

Bug summary

After a (apparently) new update to the app, it seems like the app must be installed over the Google Play store.
I'm using GrapheneOS and installed it via the Aurora Store, so far no problem there. But since today I cannot open the app anymore without getting redirected to the Google Play store.
Would be nice, if it could be installed via this alternative Store again.

App platform

Android

Device

Google Pixel 7 Pro

OS version

GrapheneOS Android 15

App version

0.12.1

Steps to reproduce

Install the app via the Aurora Store and try to open it

Expected behavior

The app should open normally

Additional information or screenshots

[Robert27]

The latest update of the app introduces integrity checks through Google Play Protect to improve security and prevent abuse. As a result, the app now requires installation via the official Google Play Store to function properly. This unfortunately affects alternative installation methods such as the Aurora Store.

We understand that this is inconvenient, especially for users of privacy-focused operating systems like GrapheneOS. We’re currently exploring alternative distribution options and are considering providing a version via F-Droid in the future to better support these use cases.

Thank you for your understanding and patience!

[Robert27]

Totally noted o.o — meanwhile we’re literally running an internal vote on this, so it’s not just me pushing buttons in the Play Console.

Also: contributing doesn't magically change Google settings, true — but it does let you help decide what buttons we push next. For example: you could directly help implement the F-Droid release ;)

[DrMaxNix]

Oh alright! I'm not at all familiar with the framework you're using, but I have published apps to F-Droid, so I'd be happy to help!
But still.. If the android app is subject to such high security concerns, how is the web app not affected by this..? Like what's the difference between using an "untrusted" app store versus using an "untrusted" web browser..?

[Robert27]

Glad to hear you’re interested in helping with F-Droid!

The breakthrough and user trust really came with having a proper native app — which is why securing it matters. Of course, you could have the same discussion for any app or website: the web app runs in a different environment, with other security assumptions and risks.

So while it’s not a perfect comparison, focusing on a secure native app is important for the experience and trust we want to provide.

[Robert27]

The internal vote resulted in a slight majority against keeping Play Integrity enabled for now. Also issue #23 highlights some current challenges with the F-Droid release process.
As a result, Play Integrity has been temporarily disabled and this change will likely take effect in the next or the following release.
Long-term, however, we still aim to re-enable Play Integrity once a proper F-Droid alternative is available and maintained.
So even if Aurora Store works again for now — don’t give up! We’d still really appreciate help getting the F-Droid version over the finish line.

[CrsiX]

Just for completeness, GrapheneOS just had a new update. See https://grapheneos.org/releases#2025052800 for details:

Disable anti-competitive code being injected by the Play Store into apps choosing to enable "App integrity > Automatic protection" when there's a valid Play Store source stamp signature (proving that it's an unmodified app from the Play Store, so we aren't disabling an integrity check) since it prevents using the apps on GrapheneOS when apps also choose to enable "App integrity > Store listing visibility" with either the "Device integrity checks" or "Strong integrity checks" values enforcing having a device licensing Google Mobile Services and running the stock OS (circumventing this is protected by the DMCA exemption for jailbreaking)

This may help the OP and others in the meantime, too.