APKBrowse Blog
Verifying what you install
How to check an APK before it runs on your phone — what a hash proves, what a signing certificate proves, and what neither of them can tell you. Written for the checks this site actually performs, and honest about the ones it does not.
Check before you install
Two checks catch most bad files: compare the SHA-256 against the published hash, and compare the signing certificate against the build you already have. Both take under a minute.
Read the safety guide