It can be as daunting as you want it to be!
Yo guys, maybe I'm regarded, but I'd like to try nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgzqtdq0 and it seems daunting. I'm supposed to get AppVerifier first to verify Zapstore. But to get AppVerifier, I'm supposed to get Accrescent first to make sure I'm getting the real AppVerifier. To get Accrescent, I'm supposed to use "apksigner" first to make sure it's the real Accrescent. It looks like I somehow have to get to a terminal on my phone to run the apksigner command and I have no idea how to do that. Do I first need Android SDK on my laptop? Download Accrescent there and check it? Then move it to my phone?
#asknostr
Discussion
Best tradeoff between convenience and security IMO:
Download Zapstore from the link in our nostr profile, to your computer. Go to the terminal and type shasum -a 256 zapstore.apk
The result should match the hash in our nostr profile as well.
From there send the APK to your phone, or repeat the download from your phone itself shortly after - highly likely the file will be the same.