Personal Device Bridge
English
Get the preview

Getting started

Check that your download is genuine

Compare the SHA-256 checksum, check the Windows signature and the Android signing certificate before you install.

1 min read Updated Applies to
  • Windows
  • Android
  • Linux

Every file we publish has a SHA-256 checksum, the Windows files are code-signed, and every Android APK is signed with the same certificate. A quick check proves the file is the one we built.

Steps

  1. Find the published checksum

    Open https://personaldevicebridge.com/download/latest.json (the SHA-256 link next to the download buttons). Each file is listed with its sha256 value.

  2. Compute the checksum on Windows

    In PowerShell run Get-FileHash "$env:USERPROFILE\Downloads\<file name>" -Algorithm SHA256. On Linux run sha256sum <file>. The two values must match exactly.

  3. Check the Windows signature

    Right-click the installer › Properties › Digital Signatures. The signer must be our business, 프로젝트팀포유 (Project Team For You), and Windows must report the signature as OK.

  4. Check the Android certificate (optional)

    With the Android SDK, run apksigner verify --print-certs <file>.apk. The SHA-256 certificate digest is 2f9b745c01b298b463d605937868ac2f6b307ebf1fd0699574327092a1b64ed1 for every release.

Going further

Release builds are reproducible and the security programme explains how the code is tested and fuzzed. Read the Security & bug bounty page, linked at the bottom of every page, and report anything suspicious to projectteamforyou@gmail.com.