Zapstore

The open app store powered by your social network

Download 1.0.0 for Android: https://zapstore.dev/

SHA-256 checksum: 37090571d00ca53ff1e4d21564a1b45e89feb09f47937d818156d48cf618e402

APK certificate hash (for AppVerifier): 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Tech support for developers: https://signal.group/#CjQKIC0VCHf6gGeeHKcIrKcaI-B5Kjvge2NKw2i4P55tMkCwEhBaOk9B80F3_MhMYVbgj7lL

Tech support for users: https://signal.group/#CjQKIK20nMOglqNT8KYw4ZeyChsvA14TTcjtjuC2VF6j6nB5EhDLZ7pQHvOeopr36jq431ow

Nostr DMs will be ignored, tag us instead.

Public Key

npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8

NIP-05 Address

zapstore.dev

Profile Code

nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds3d9ezw

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8

Show more details

Last Notes

2026-03-25 19:04:56 UTC

Fixing tons of bugs y'all reported in the mobile app, thanks for the feedback!
New release coming soon 🫡

2026-03-21 00:36:55 UTC

- reply

When things change, we will find a way.
What's important is not becoming a cucked doomer.

2026-03-18 01:54:35 UTC

- reply

When you inspect the generated events, the 'author' there does coincide with the npub in zapstore.yaml?
Try again I whitelisted you

2026-03-18 01:52:30 UTC

- reply

This is very strange, I had multiple people publishing this way already. I'll manually whitelist you

2026-03-18 01:19:14 UTC

- reply

I fed it to the agent, it compared against the code and concluded you may be signing with a different pubkey than the one declared in the config. Can you confirm?

2026-03-16 18:11:03 UTC

- reply

Love it

2026-03-16 14:29:51 UTC

- reply

of course...

2026-03-16 14:29:23 UTC

- reply

It was a joke. Just in case.

2026-03-16 13:32:58 UTC

- reply

There will be a perfect way out: add to your license you do not allow using your software anywhere in the world 😂

2026-03-16 13:01:46 UTC

Designing a NIP for age verification so you can use Zapstore in California.
😂😂
https://image.nostr.build/c58ca545ab6f7cb8da6da581bf40ca75cb2d379b65fd482b809e6b8d1d760424.png

2026-03-16 12:19:48 UTC

- reply

Give this to your AI and it will figure it out: https://zapstore.dev/docs/publish

2026-03-16 12:18:56 UTC

- reply

Exactly. Give this to your AI and it will figure it out: https://zapstore.dev/docs/publish

2026-03-16 12:15:33 UTC

- reply

Are they even on Nostr?

2026-03-14 15:39:17 UTC

- reply

Think whatever you want. But if you are going to call my work's mission ignorant then get the fuck out of my comments.

2026-03-14 01:39:51 UTC

- reply

This is funny, ngl

2026-03-14 01:39:35 UTC

I didn't know Stockholm syndrome existed for mobile devices 😂
#nevent1q…l3mw

2026-03-14 01:30:46 UTC

PSA if you see duplicated apps in Zapstore, or apps signed by Zapstore that shouldn't, please go to profile screen > Clear local storage
#nevent1q…6mrv

2026-03-14 01:29:20 UTC

- reply

@npub1kzg…ylue and @npub1w4u…0jr5 I'd appreciate if you could re-publish your latest versions. This mistake won't happen again, I'm sorry!
Recovered events for @npub142g…xrj0 @npub1lu2…xlm6 @npub1v3t…yvjh @npub120m…5vf8 @npub1z2g…6ser but if you could please double-check apps are effectively in their latest versions.
Thank y'all for understanding.

2026-03-14 01:24:34 UTC

Zapstore relay is back up again!
Post-mortem:
A bug in the indexer background process replaced 8 self-published apps with indexed ones (signed by Zapstore indexer). Main symptom for users was seeing duplicates of these apps.
Backups were there but faulty so the recovery was difficult and partial. 5 were successfully recovered and 3 were not (Primal by @npub1kzg…ylue and Amber and Citrine by @npub1w4u…0jr5 ).
Users please go to your profile screen > "Clear local storage" if you see double entries of some apps! We are working on a feature in the next release to repair these issues without you having to delete the cache.
Backups, as well as the original indexer bug, were fixed.
#nevent1q…trck

2026-03-13 19:35:46 UTC

I'll explain:
- I'm switching off the relay to prevent bad data from spreading to clients which will cache it
- We are working on ways to bust these cache entries in the mobile app but that's not ready yet (next release though)
- If I leave the relay on, I will get an avalanche of support requests I can't handle by myself
- I'm also the only guy doing devops, which really is a full-time job in itself, and I have an appointment now so I'll take care of it when that's done. At least 2-3 more hours
tl;dr: making sure all apps are always up to date is hard.
#nevent1q…n50a

2026-03-13 19:29:41 UTC

We just had a data issue in our indexer, it's possible I have to turn the relay off for a few hours. Investigating. Apologize in advance.

2026-03-13 18:34:26 UTC

- reply

What is the most secure Android in your opinion, then?

2026-03-13 18:32:32 UTC

- reply

I am interested, so I searched HN threads and could not find anything like you describe. Can you share some links?

2026-03-13 16:06:22 UTC

- reply

Let me know if we can help you in any way.
FYI there is now the option of cryptographically linking your Nostr identity to your Android keystore/certificate (zsp identity --link-key). That is one single event you sign once, it can even be done offline and then publish. From that moment on we take care of pulling your new releases into the Zapstore relay.
Pro: you don't have to mess with crafting Zapstore-compatible events. Con: you don't have full control over the metadata, though in practice it works just fine as we can pull metadata from Google Play, F-Droid and others.

2026-03-13 15:54:19 UTC

- reply

Any plans of publishing the Android app on @npub10r8…t2p8 ?

2026-03-13 15:40:46 UTC

- reply

You're right, fixed it in the wizard

2026-03-13 15:07:47 UTC

- reply

Ideally the icon should be correctly extracted from the APK. Just FYI, this appears to be an edge case as we parse over 3000 apps and very few have issues with icons.
Overriding in metadata should work, what do you mean it does not let you pick an icon? If you send more info I can help

2026-03-13 15:02:12 UTC

- reply

It will improve soon. You can find yours by visiting your profile in the app

2026-03-13 15:00:28 UTC

- reply

Explain

2026-03-13 14:58:48 UTC

- reply

What are you talking about?

2026-03-12 16:48:30 UTC

- reply

It has to be companies with *some* weight I imagine, not just random apps

2026-03-12 16:29:21 UTC

- reply

Stack accordingly

2026-03-12 14:47:47 UTC

- reply

You can keep using Verizon I suppose

2026-03-12 14:41:36 UTC

- reply

Per month? 🤔

2026-03-12 14:40:44 UTC

- reply

This is amazing. How can we make it more amazing by including a Zapstore link to https://zapstore.dev/apps/app.zeusln.zeus in step 1? @npub1xnf…lpr5

2026-03-12 14:29:49 UTC

- reply

Go for it!

2026-03-12 14:24:32 UTC

We have reached out to Keep Android Open to co-sign the letter: https://keepandroidopen.org/open-letter/
After a week, received no response. I read somewhere that they require a Wikipedia page (?) to get listed.
But we will add some form of banner to our app and website.
(1) Anyone here with a Wikipedia account to create a Zapstore entry?
(2) Anyone here with a contact at Keep Android Open?
I was happy to see a good soul added Zapstore on here: https://en.wikipedia.org/wiki/List_of_Android_app_stores

2026-03-12 14:19:32 UTC

- reply

Great question!

2026-03-12 14:19:19 UTC

If Google does not change its stance before September, assume some apps won't work on Google-controlled devices.
For those using Zapstore on the Guulag, we will attempt to identify apps such that users can know/filter beforehand. At the same time, we will take the opportunity for a marketing campaign emphasizing:
"Google owns your device and is limiting your options. If you want to fully unlock all apps, use @npub1235…0ht5 or other alternative ROM."
Hoping to leverage this insanity against their control.
#nevent1q…scfq

2026-03-12 12:29:16 UTC

- reply

Music to my ears... thank you 💜

2026-03-12 12:22:38 UTC

- reply

Fixed now?

2026-03-12 12:20:11 UTC

- reply

Thank you

2026-03-12 00:34:34 UTC

- reply

It was all for your own good 😅

2026-03-11 19:00:42 UTC

- reply

@nprofile…6vq0

2026-03-11 19:00:17 UTC

- reply

Yes, of course, it will come. We're doing what we can

2026-03-10 22:10:04 UTC

After these important infrastructure improvements, our next big challenge is communities (next 4-6 weeks).
Anyone is able to run one, and discoverability will be first-class in the app and webapp. Instead of managing relays, Blossom servers, and tweaking a bunch of technical knobs, no: those are prepackaged in a community spec.
We are going to push the permissionlessness hard.
Stay tuned, it's going to be awesome.

2026-03-10 22:02:20 UTC

- reply

Lol I was half joking. I don't think it's targeted to Zapstore necessarily, but they should do better

2026-03-10 22:00:55 UTC

Re: app updates.
On the indexer side, we deployed a demand-driven schedule meaning that your requested updates trigger a check - instead of being cadence driven (e.g. every day).
This means more efficient and faster updates across the board!
The indexer also now does takeovers, so if a developer stops publishing for whatever reason, the indexer acts as a safety net so you don't miss updates!
If the developer had cryptographically linked their APK certificate, then we can keep publishing on their behalf.

2026-03-10 21:57:24 UTC

- reply

@npub1lqu…qaf3 @npub1u07…ez97 @npub175n…g6w0
As I told you previously I had to remove your cryptographic links (event kind 30509) you published to Zapstore, probably via `zsp identity --link-key`, due to change of spec. It now carries the certificate hash (not the public key hash) so we can actually do comparisons against releases.
I'd appreciate if you updated and ran it again!

2026-03-10 21:49:13 UTC

Attention developers. We're relentlessly lowering the bar for publishing.
If your npub is rejected (usually happens with new npubs) you no longer need to ask for whitelisting.
Simply add a 'pubkey' YAML property in your zapstore.yaml config file (must be at root of your repository, pushed) with your npub.
That's it!
(Malicious apps will swiftly get removed and the entire user from the forge, permanently blacklisted.)

2026-03-10 21:43:21 UTC

✨ New feature (in alpha!)
Something that many asked for a long time.
You can now suggest apps to the Zapstore indexer. Simply search for the full repository URL like https://github.com/user/repo
If you get no results back, it will be queued for indexing in the background, and if it has valid APK in its releases, it should shortly be available.
Github only for now. Try it out!

2026-03-10 21:35:40 UTC

- reply

Yes, and we would like to make them obsolete

2026-03-10 21:35:12 UTC

🚀 zsp publishing tool, just released 0.4.0
Lots of fixes and a publishing flow to link your APK certificates to your Nostr identity, implementing our new NIP-C1!
I encourage you to start signing these, it will strongly help improve trust signals.
It also works outside the flow, via: zsp identity --link-key
https://github.com/zapstore/zsp

2026-03-10 21:14:20 UTC

Aurora Store release repository (auroraoss.com) has blocked Zapstore indexer IP, so no updates from them.
Github being more open than a FOSS project, who would've guessed.

2026-03-10 20:55:55 UTC

- reply

You need to run 1.0.0 at least. Update, download again if necessary

2026-03-06 12:29:17 UTC

- reply

1. Publishing on Zapstore does not imply not publishing on other stores.
2. Some of your users want to see it here so they can easily update.

2026-03-06 12:23:09 UTC

- reply

It costs nothing to try it! You don't even need to sign in or transfer anything

2026-03-05 14:51:20 UTC

- reply

There are some. Would like to show real time numbers though... working on that right now 🫡

2026-03-05 13:57:42 UTC

- reply

How many users do we need for you to publish here?

2026-03-05 13:56:53 UTC

"Nostr is only known by a very small number of people so I'll just stick to big tech" 😜
#nevent1q…8axq

2026-03-05 13:47:15 UTC

- reply

Blossom protocol

2026-03-05 13:46:54 UTC

- reply

I did not experience this. What are you seeing?

2026-03-02 14:12:28 UTC

- reply

Sure but you are requesting a massive feature and no developers have any Monero set up. It's not going to happen, I don't have the resources for it. Feel free to DM your favorite devs and send them the money you want.

2026-03-01 14:22:37 UTC

- reply

Can't you swap Monero into LN?

2026-03-01 14:20:46 UTC

- reply

Because we don't necessarily publish every release to Github

2026-02-28 18:54:10 UTC

- reply

We are going to fix it

2026-02-28 18:45:55 UTC

- reply

If you do not see an update in Zapstore, please download from our website!

2026-02-28 18:37:48 UTC

Friendly reminder:
#nevent1q…jww5

2026-02-28 15:11:29 UTC

https://a2ui.org/assets/landscape-architect-demo.mp4

2026-02-28 03:01:10 UTC

- reply

Does that mean blind trust in apt repositories?

2026-02-28 02:58:59 UTC

- reply

Probably not anytime soon!

2026-02-27 21:12:48 UTC

- reply

Update Zapstore, not Zapstore Alpha!

2026-02-27 20:08:17 UTC

- reply

🤔

2026-02-27 19:48:19 UTC

- reply

@nprofile…lkqd are you guys using a different APK cert for Github releases than Zapstore?

2026-02-27 16:22:09 UTC

PSA: Update to the latest Zapstore, and tell your friends to do so!
Soon, Zapstore 0.2.7 or earlier will stop receiving some app updates.
We have initiated our progressive migration process to the new NIP which is only supported by Zapstore 1.0.0 or later. It will likely take a few months until all developers are moved over.
https://nostrhub.io/naddr1qvzqqqrcvypzq7xwd748yfjrsu5yuerm56fcn9tntmyv04w95etn0e23xrczvvraqy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqqz8qeqp2qk5p

2026-02-26 22:49:04 UTC

- reply

Oh yeah!

2026-02-26 17:04:50 UTC

- reply

Thanks, could not delete. I had to make it blank.

2026-02-26 16:18:13 UTC

- reply

I think there's not more outrage because it only applies to the garbage OS controlled by Google. Many privacy minded folks do not use it

2026-02-26 14:41:06 UTC

- reply

@nprofile…2szn i'm trying to delete a bad version of this spec on nostrhub , which relays is it pulling from? Sent kind 5 to damus and primal already

2026-02-26 14:30:30 UTC

Updated the Cryptographic Identity Proofs NIP, now uses APK certificate hashes instead of SPKIFPs.
I'm working on zsp to reflect this, and possibly require it as proof that developer npubs actually "own" APKs (it's a one-time process at setup) to further prevent impersonation.
This also opens the door for self-publishing by signing just one event, once.
https://nostrhub.io/naddr1qvzqqqrcvypzq7xwd748yfjrsu5yuerm56fcn9tntmyv04w95etn0e23xrczvvraqy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqqavde8jur5danhyctsdp5kxttfv3jkuarfw3uj6urjdahkvuc2wg0mz

2026-02-26 12:31:31 UTC

- reply

Have you tried publishing already? I don't think you need whitelist

2026-02-25 00:34:20 UTC

There's a new self-published app in the store that a lot of you were asking about

2026-02-25 00:20:39 UTC

- reply

We don't support it, so I don't know

2026-02-25 00:04:12 UTC

Seems like people are using Zapstore!
https://image.nostr.build/43f831ff12185462badefb7df1a7cfae7f63a111b8be95e1f9bcedde8b5daec3.png

2026-02-24 20:22:49 UTC

New release of publishing tool zsp 0.3.4 with various requested fixes!
https://github.com/zapstore/zsp/releases/tag/v0.3.4
#devstr

2026-02-17 21:51:20 UTC

Private Update Queries is a feature we'll be working on this year, whereby the relay will have no clue which apps you have installed on your device - through some cryptography magic: VOPRF-based Private Set Intersection.
Tell me which app store cares more about user's privacy. I'll wait.
If you have any cryptographer friend who can help us review, let us know!
https://github.com/zapstore/zapstore/issues/325

2026-02-17 21:46:42 UTC

- reply

It's coming with "release channels" in the new spec. It will take a while to migrate all devs to that, so patience

2026-02-16 16:26:37 UTC

- reply

Done

2026-02-16 14:15:25 UTC

- reply

Which problem, a 404? Pull to refresh

2026-02-15 17:47:05 UTC

WhatsApp on Zapstore ruffled some feathers.
Made it to the Bullshit stack, "a stack of curated bullshit applications" 😂😂😂
Love to see this! Social signal in action.
Reminder: the ability to remove indexed apps, and hide closed source apps: coming soon.
https://zapstore.dev/stacks/naddr1qvzqqqrk8vpzpvd2l64jre4490j0l8el6hynvk6e6lzjnryaw7nuc93z7avz4zgkqqyxyatvd3eks6t5gk6zma
#nevent1q…9ffh

2026-02-15 01:00:38 UTC

- reply

How badly do you want it?

2026-02-14 14:54:52 UTC

- reply

I have no idea. Can you update to the latest zapstore?

2026-02-14 14:49:21 UTC

- reply

Your comment would be more helpful if you left it here: https://zapstore.dev/apps/naddr1qvzqqqr7pvpzq7xwd748yfjrsu5yuerm56fcn9tntmyv04w95etn0e23xrczvvraqqxxxmmd9emksct5wdshquqpnlc6g

2026-02-13 18:02:03 UTC

Developers: our publishing tool zsp 0.3.3 released with several fixes
https://github.com/zapstore/zsp
Soon available in zapstore-cli (which is being converted to a simple package manager)

2026-02-13 17:07:29 UTC

WhatsApp now indexed on our relay, directly from their website!
While it may not be the best messenger out there, and their words taken with a grain of salt, people should be free to choose. Russians today are being pushed to use a government-surveilled one.
https://image.nostr.build/641dc69829c07bcfc7d4135b381eec067175295eac8ebafba3a4da13d6efe5fe.png

2026-02-11 20:34:33 UTC

- reply

Thank you!

2026-02-11 17:18:08 UTC

Open your Zapstore and see them stream in. Fun to watch.
#nevent1q…89xw

2026-02-11 17:13:52 UTC

STEADY LADS
Deploying 2000+ new apps

2026-02-11 15:55:06 UTC

- reply

Thank you amigo @npub107j…ncxg 🫂

2026-02-11 14:48:31 UTC

- reply

Makes sense, can you open an issue? zapstore/zapstore/issues