Is Cambium safe?

Cambium is an Android NIP-55 signer that holds no user keys. Every signing request is proxied to a paired Heartwood hardware signer over NIP-46 (Nostr relays), and the response is handed straight back to the requesting app. Amethyst, Primal and most other Amber-compatible Android Nostr clients cannot log in to a remote NIP-46 bunker directly, but they all support signing in via any installed NIP-…

Developer: Forgesworn
Category: Internet
First release: 15 Sept 2026
License: Not documented

02 / Package identity

Technical fingerprint

Application IDdev.forgesworn.cambium

Latest APK SHA-256857453f021569c9dffc59afc96e295e4b96afe21cd49224b1aecaaa06d65e983

Signing certificate9E:A1:88:EF:A9:01:5F:7E:7F:90:E1:88:8F:58:6F:52:7B:2A:0E:8A:6D:CD:B3:99:1E:41:FB:4F:14:EE:EF:C6

MIN ANDROID27TARGET35ARCHITECTUREarm64-v8a · x86_64

03 / History

Project timeline

15 Sept 2026

Package observed in source index

Metadata and versions observed from the fdroid repository index.

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

0.4.315 Sept 202627+arm64-v8a, x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions9 declared · 1 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessCAMERA

Declared permissions

android.permission.CAMERA android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_SPECIAL_USE android.permission.INTERNET android.permission.POST_NOTIFICATIONS android.permission.RECEIVE_BOOT_COMPLETED android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT dev.forgesworn.cambium.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗