Is Karabau safe?

Karabau is an open-source Android client for Karakeep, built entirely with Jetpack Compose. Use it to keep your bookmarks in one place, with a native mobile experience focused on speed and simplicity. Features: - Browse your complete bookmark feed - Search bookmarks quickly - Manage tags and lists - Open bookmark details with quick actions (share, favorite, archive, delete) - Save links directly…

Developer: Luiz Renato (ruizlenato)
Category: Bookmark
Earliest archived version: 01 Aug 2026
License: GPL-3.0-only (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

01 Aug 2026

1.4.2

Added custom headers management for API requests, accessible from the Add Server screen and Settings - Added support for insecure HTTP servers (no SSL) with a confirmation dialog, useful for local self-hosted servers - Fixed bottom action buttons being overlapped by the system navigation bar

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.ruizlenato.karabau

Latest APK SHA-2569bad5ccfcc8dedc2544fc92d88511e636db5fef3dea7f8e064fe268fadddfaea

Signing certificate7A:66:E7:D1:CA:34:75:58:BC:DE:5F:C4:05:CB:04:78:F3:B8:1C:02:B1:01:81:CB:CE:58:F7:97:95:DA:D8:40

MIN ANDROID31TARGET36ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

1.4.201 Aug 202631+arm64-v8a, armeabi-v7a, x86, x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions3 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET com.ruizlenato.karabau.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗