Hardened, minimal-attack-surface Matrix client for Android.
Download xchat.apkConfirm the APK is authentic — do not install if either value differs.
SHA-256 of the APK:
44b9f26a42dc2a49674a95e4c5ded11e44485e8052c594fdb12999cd15581c80
Signing certificate SHA-256:
EC:07:1A:1E:0E:1D:CF:3F:40:65:8F:CD:38:77:0B:24:6A:FD:CD:A0:3C:19:4D:D2:76:50:26:95:EB:7D:B4:54
Check the download: sha256sum xchat.apk
Check the signer: apksigner verify --print-certs xchat.apk
Managed devices: distribute via MDM instead of manual sideload.