Download it from this site
Not from a mirror, not from a link someone forwarded you. The digest below only means anything if the file came from here.
ANDROID / 0.9.16 (116)
Livara,pocket edition.
The 0.9.16 Flutter build, not a website in a frame. Same account and conversations, encrypted local storage, verified updates, LGS1 private-group text and media, and deliberate system permissions.
Nadia R.SEALED · LVR1 HYBRID-PQ
did the checksum match?21:04
yeah. same 64 characters, byte for byte.21:04
8F2A C40E 91BD 77A3 E5F0 1C98 B6D2 4A71 0E33 A8C5WHAT THE RELAY STORED
so the server just moved that?21:05
that is the whole job. it never had the key.21:05
Message
The release
Four changes you can feel.
The version, build number, checksum and APK below all describe this exact release—not a generic download page.
- Changed contact identities are quarantined and require your approval before Livara creates a replacement secure session.
- Existing local history moves into SQLCipher through a recoverable migration; interrupted migration no longer sacrifices the original database.
- Update metadata is signed, and downloaded APKs must match the published size, SHA-256 and Android signing lineage before installation.
- Notification permission is requested only from Settings, while pattern lock, stories, media controls and settings expose TalkBack-friendly actions and touch targets.
Size198.2 MB
RequiresAndroid 7.0+
Build0.9.16 (116)
Store reviewNone
The honest one. A direct install skips the review that would normally sit between you and a modified file. The digest replaces it.
The digest
And why you should actually use it
This build is signed with the project verification key. Verifying the digest takes about fifteen seconds and is the difference between installing our app and installing something wearing it.
916D12CC FDA7F4A8 EF95744A 6419AAB9 169FA5A0 74F977DB CB7C77A7 92C4C2AE
Install
Four steps. One of them matters.
Verify the digest before anything else
Use the Proof Lab on this site, or sha256sum on your own machine. If the two strings differ by a single character, delete the file.
Open it and allow the install
Android will ask whether your browser is allowed to install apps. Say yes, install, then turn that permission back off afterwards if you like.
Sign in
Same account as the web client. If you are restoring the encryption identity on a new device, have your recovery phrase ready. It does not restore chat history or ratchet sessions.
Contents
What is in the package
- LVR1-encrypted direct text and media
- LGS1-encrypted text, edits, captions and attachment keys in compatible private groups
- Livara AI on device and admin-granted Livara AI Pro
- Persistent voice assistant and reviewed Smart Actions
- Hold-to-record voice notes, circular video, stickers, gifts
- Classic, Day, Night, Tinted and true-black AMOLED themes
- Offline cache, retrying outbox, resumable uploads
- DTLS-SRTP direct and 2–6-person Android group calls with pairwise-sealed signaling
- Video, adaptive participant grids and screen sharing across every active peer
- The same durable sync stream as the web client
- End-to-end encryption for channel content or every reaction/control event
- Browser group-room joining, MLS/SFrame, or post-quantum media transport
- Witnessed key transparency or malicious-server-safe LGS1 membership
- Any way to hide that you are connecting to Livara
- A recovery path that works without your recovery phrase
Verify first. Install second.
Prefer not to sideload anything at all? The browser client is the same account and the same guarantees, with nothing to check.