HOST · file hosted
This exact APK was checked
The APK signature is valid and its certificate matches the one confirmed for this app.
↓ Download APK · v0.29.1 · 11.0 MB18447bfb1e06d113edc88df93f471827280de06f6f3d4dc42f56f28b9c1bab79
Independent distribution by apkproof. apkproof is not affiliated with or endorsed by the app’s developer. This APK is an unchanged copy fetched from the developer release identified below; apkproof is not an official distribution channel.
How to install an APK
Open the APK you downloaded on your Android device and follow the system installer. The installation settings vary by Android version and device.
If Android warns that the file may be harmful, stop and investigate the warning. Do not turn off Play Protect to force the installation.
Limit: These checks identify the file; they do not guarantee that the app is safe.
What exactly is this file?
These details describe only the APK for version 0.29.1 (1015).
- Version / build
- 0.29.1 / 1015
- Recorded by apkproof
- 16 Aug 2026
- File
- APK · 11.0 MB
- Minimum Android
- Works on Android 6.0+ (API 23)
- Built against
- targetSdk 35 (Android 15)
- Package
- org.schabi.newpipe
- Architecture (ABI)
- arm64-v8a,armeabi-v7a,x86,x86_64
Android requirements come from the APK metadata. Compatibility with your particular device was not tested.
Compare a downloaded file (SHA-256)
This is optional: calculate the SHA-256 of an APK already on your device and compare it with the value recorded above for the same version. No file is uploaded anywhere.
On a computer, open a terminal in the folder containing the APK and run the command for your system, replacing app.apk with the actual filename (put a name containing spaces in quotes).
- macOS ·
shasum -a 256 app.apk - Linux ·
sha256sum app.apk - Windows · PowerShell ·
Get-FileHash -Algorithm SHA256 .\app.apk
Compare all 64 characters; upper and lower case are equivalent. A match tells you the file contents are the same one we recorded — it is not a statement that the app is safe. The signing certificate's fingerprint is a different value and lives in the signature section.
Signature check
Signature and certificate checks for APK 0.29.1 (1015).
- APK signature
- APK signature valid
- Signing certificate
- Certificate matches the one confirmed for this app
- Checked on
- 28 Aug 2026
- Version comparison
- Single checked version — no history to compare yet.
- Source
- developer release file
A certificate match links this file to the certificate we accepted from the recorded source. It does not independently identify who holds that key, and it is not a judgement about whether the app is safe.
Certificate and basis for comparison
apkproof checks the APK signature with apksigner. For the first accepted file an editor reviews the official release source and records the certificate extracted from that APK; every later file is compared with that recorded certificate.
- Certificate subject
- Christian Schabesberger
- Certificate confirmed
- Confirmed by an editor on 28 Aug 2026, from: https://github.com/TeamNewPipe/NewPipe/releases/download/v0.29.1/NewPipe_v0.29.1.apk
Signing certificate · SHA-256 fingerprint
cb84069bd68116bafae5ee4ee5b08a567aa6d898404e7cb12f9e756df5cf5cab
This identifies a certificate, not the contents of the APK file — the file's own SHA-256 is with the download above.
Licence and source code
Licence, source archive and distribution basis recorded for version 0.29.1.
- Licence
- GPL-3.0-or-later · License text
- Source for v0.29.1
- Corresponding source
apkproof links the licence evidence and the source archive URL recorded for every file distributed under this basis. For licences such as GPLv3, providing access to the corresponding source is part of the distribution conditions.
What do these links tell me?
The licence text states its conditions. The source archive link is a reference associated with the recorded version, not a copy apkproof stores and freezes: an upstream tag can move or disappear. Listing it does not establish that this APK was built from that source.
Open source, free download and permission to redistribute are three different facts. None of them is a guarantee that an app is safe.
Permissions and version changes
Permissions declared in APK 0.29.1 (1015).
Single version in the catalog — the diff appears with the next release.
Permissions in v0.29.1
- ACCESS_NETWORK_STATE
- FOREGROUND_SERVICE
- FOREGROUND_SERVICE_DATA_SYNC
- FOREGROUND_SERVICE_MEDIA_PLAYBACK
- INTERNET
- POST_NOTIFICATIONS
- RECEIVE_BOOT_COMPLETED
- SYSTEM_ALERT_WINDOW
- WAKE_LOCK
- WRITE_EXTERNAL_STORAGE — dangerous
- org.schabi.newpipe.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
A permission declared in an APK is not evidence that it was granted or is actually used. The manifest alone does not show what data an app collects.
All declared permissions · 11
android.permission.ACCESS_NETWORK_STATEandroid.permission.FOREGROUND_SERVICEandroid.permission.FOREGROUND_SERVICE_DATA_SYNCandroid.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACKandroid.permission.INTERNETandroid.permission.POST_NOTIFICATIONSandroid.permission.RECEIVE_BOOT_COMPLETEDandroid.permission.SYSTEM_ALERT_WINDOWandroid.permission.WAKE_LOCKandroid.permission.WRITE_EXTERNAL_STORAGE— dangerousorg.schabi.newpipe.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Version history
| Version | Signature checked | Size | minSdk | Changes |
|---|---|---|---|---|
| 0.29.1 Latest version in this card | 2026-08-28 | 11.0 MB | 23 | — |
VirusTotal
Third-party results for APK 0.29.1 (1015), separate from its signature check.
- Stored result
- 0 of 75 engines flagged this file on 2026-08-28.
- Report
- Open VirusTotal report ↗
This is a stored third-party result, not a safety verdict from apkproof. Zero detections means no engine in that reading flagged it — nothing more.
How to read this result
The first number counts engines that classified the file as malicious. The total can include engines that gave no verdict, failed, timed out or did not support the file type — it is not a count of successful checks, nor of engines voting the file harmless.
The date is when apkproof retrieved the result, not when VirusTotal analysed the file; that analysis date is not recorded here. The linked report may have changed since — this page is not a live scan.
A report describes one file, identified by the SHA-256 recorded for it. It is not a report about every version of the app, and it does not replace the signature check or the distribution basis.
Something wrong with this card?
Contact the apkproof editors. For help using the app itself, contact its developer.
Report a copyright problem · Report a suspicious file · How we check things