Lavabit Encrypted Proxy is an open-source (GPL-3.0-only) Android app by Lavabit LLC. The APK we host is 20 MB, it needs Android 4.1 or newer, and it declares 9 permissions.
The file on this page is Lavabit Encrypted Proxy 1.0.2, 19.84 MB, and it installs on Android 4.1 and newer.
We compared the signing certificate of this build with the certificate recorded the first time com.lavabit.pahoehoe entered the site, and published both the file's SHA-256 and the certificate's fingerprint above so you can check the download yourself. That comparison says the file was not repackaged by someone else; it is not a review of what the app does.
The manifest inside the APK declares 9 permissions, none of which cover contacts, location, SMS, the camera or the microphone.
Its licence is GPL-3.0-only. We took this build from F-Droid, and the source for this exact version is linked below.
The most recent release upstream is from Apr 23, 2022, over 4 years ago. It still installs; it is simply not being updated.
We do not show a star rating or an install count for this page: we have no measured figure for either, and a number we cannot source is worth less than an empty field.
- Version
- 1.0.2
- Size
- 19.84 MB
- Requires Android
- API 16
- Package
- com.lavabit.pahoehoe
- Signature checked on
- Sep 22, 2026
- Where this file came from
- F-Droid
- Licence
- GPL-3.0-only
- Source code
- Source for this version
File SHA-256: 700d0cdc53eea321cfb2da25ca01707ba9a508d35419ea0877d520148a6fb906
Signing certificate (SHA-256): b929841e46033943c7d08222012d6f85c175e03109c044916dbd074677ce8d07
We check that this file carries the same signing certificate as earlier releases of the same package. That shows the APK was not repackaged by someone else — it is not a security review of the app.
Declared permissions
- INTERNET
- ACCESS_NETWORK_STATE
- ACCESS_WIFI_STATE
- RECEIVE_BOOT_COMPLETED
- VIBRATE
- WAKE_LOCK
- FOREGROUND_SERVICE
- WRITE_EXTERNAL_STORAGE
- QUERY_ALL_PACKAGES
Screenshots
