Is MetroVault safe?

MetroVault turns an Android phone into a secure, air-gapped Bitcoin signing device like a cold-storage hardware wallet. It acts as an offline signer for your watch-only wallets (such as Sparrow, BlueWallet, or Electrum) running on an online device. Your private keys are generated and kept on a phone that never connects to the internet; all communication happens through QR codes, and network acces…

Developer: Gorun Jinian
Category: Wallet
Earliest archived version: 07 Sept 2026
License: GPL-3.0-or-later (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

07 Sept 2026

3.9.5

Taproot signing fixes: key matching for some master fingerprints, BIP-86 output-key check, sighash validation - Clear per-input warnings when a PSBT can only be partially signed - Coordinator export for Nunchuk and Coldcard/Sparrow JSON, multi-account, animated QR - Show/hide toggle on password…

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.gorunjinian.metrovault

Latest APK SHA-2560861a1007d84fb824d9e8f1c55bdfedc5fbdb858984b1d683fe1e0634713edb7

Signing certificate12:45:55:4C:EB:17:CE:A2:1E:99:12:AF:7B:F6:0D:38:D7:16:F5:88:4D:4B:36:64:E5:33:84:62:CC:76:FD:03

MIN ANDROID26TARGET36ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

3.9.507 Sept 202626+arm64-v8a, armeabi-v7a, x86, x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions4 declared · 1 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessCAMERA

Declared permissions

android.permission.CAMERA android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT com.gorunjinian.metrovault.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗