Skip to content

Trikey FOSS

Install Trikey FOSS

Download Zapstore

Download
QR code for zapstore.dev/download
  • Scan the code with your phone’s camera
  • Tap Download anyway if the browser warns about the file
  • Allow your browser to install unknown apps if Android asks
  • Open Zapstore and finish the onboarding

Open Trikey FOSS in Zapstore

Open
QR code to open Trikey FOSS in Zapstore
  • Scan the code to open Trikey FOSS in Zapstore, or search for it there
  • Tap Install, and Download if Zapstore asks you to confirm the developer
  • Confirm in Android’s install dialog. Allow Zapstore to install unknown apps if Android asks

Claimed by the developer

Trikey cryptographically proved they hold the key that signs Trikey FOSS. The claim is a signed proof on Nostr, tied to the certificate below.

Developer
Trikey
Developer key
npub1qussfnkjk6fvr36syatltxl0ks5pssyx7hrhf8zpnp9mf04e5j2sswedj9
Signing certificate
c6c46a1332725111413a7b0313e2f2f37b10f0ce4c8da1cac3c92d179a162da7
APK checked by
relay.zapstore.devIt read the APK and found it signed with this certificate before listing the release.
Claim published
Nov 4, 2026
Valid until
Nov 3, 2028
Proof event
91ea2ef9c5bea394c138591d1fff637e04496c38e9e1fac3b99d02d7cd62dce4in relay.zapstore.dev
How trust works

2-of-3 bitcoin wallet where every key is yours. Everyday payments use only the phone under a daily limit enforced by your own guardian server; bigger payments need your hardware wallet. Includes Delay & Notify recovery that alerts contacts over nostr if you lose the phone.

Trikey FOSS is Trikey built without any Google code, for phones without Google Play services (GrapheneOS, /e/OS, LineageOS) and for anyone who prefers it. QR codes are read with the open source zxing-cpp; the backup is a recovery code plus a backup file, never Google Drive. It is a separate app from the standard Trikey, with its own wallet.

Trikey is a 2-of-3 bitcoin wallet: your hardware wallet (Ledger, Trezor, Coldcard, BitBox, Jade and more), this phone, and the Trikey Guardian on your own Umbrel, Start9 or computer. Everyday payments need only the phone, under a daily limit the guardian enforces. Bigger payments and rule changes need your hardware wallet. Lose the phone and a Delay & Notify recovery gets your money back while your alert contacts are told over nostr.

Used the no-Google Trikey of 0.1.21 or earlier? It was the same app as the standard Trikey; this one starts empty. Restore your wallet here from your backup file and recovery code ("I already have a Trikey wallet").

Made by Icarus Wings, Icarus Wings (icaruswings@trikey.app). Published by Trikey's own npub (trikey@trikey.app), and signed with the same key as the GitHub releases.

Pre-alpha, open source, not audited. Use test networks, or on mainnet only an amount you can afford to lose.

Summary generated by Zapstore from source.

Original description, as the developer published it.

Zap Trikey FOSS

Zapping anonymously. Sign in to zap with your identity.

Sats go to npub1qussf…swedj9, the developer who signed the app’s certificate proof.

Amount in sats

Stacked in

Latest release

Nov 10, 2026

Claimed app No Google servicesSource available · MIT

Location access and drawing over other apps have no shown use.

Permissions

Coarse locationFine locationNearby devicesCameraFilesOverlay What they allow
  • Coarse location ACCESS_COARSE_LOCATION See your approximate location ACCESS_COARSE_LOCATION
  • Fine location ACCESS_FINE_LOCATION See your precise location ACCESS_FINE_LOCATION
  • Nearby devices BLUETOOTH_CONNECT Find and connect to devices around you
  • Camera CAMERA Take photos and record video CAMERA
  • Files READ_EXTERNAL_STORAGE Read files on this phone
  • Overlay SYSTEM_ALERT_WINDOW Draw over other apps SYSTEM_ALERT_WINDOW

Uses the camera to scan QR codes from a hardware wallet.

Release notes

A guardian fix for shutting down, and how releases reach you. Update the guardian, then the app.

  • The guardian finishes what it started before it stops. When the guardian stopped (an Umbrel update or restart), an alert still being sent to your contacts, for example about money leaving Savings, could be cut short, and so could a save of its state. Now it waits for both, up to a few seconds (#222).
  • Releases are normal GitHub releases now, not pre-releases: Obtainium no longer needs "Include prereleases", and Zapstore should pick each release up by itself. The version still says "alpha", and Trikey is still pre-alpha and not audited. After each release a check watches Zapstore and opens an issue if an app isn't updated there (#221).
  • For testers: docs/testers.md, a one-page start, and a "Hardware wallet test report" issue form; every device but the Ledger is still to be tried on real hardware (#216). The beta checklist records the defaults (a 200,000 sats daily limit suggested, a 7-day delay), Start9 as "build it yourself" and the iPhone built from source for the beta (#215).
  • For maintainers: tools/release/bump.mjs moves the version everywhere, docs/releasing.md is the runbook, and the changelog uses Keep a Changelog headings so Zapstore gets one release's notes (#217, #218); a flaky test fixed (#220).

Comments

Loading comments…

See more

Get Trikey FOSS the private way

Updates checked on your device, and every release verified before it installs.

Get Zapstore for Android

  1. Tap Download APK below.Scan the code with your Android phone’s camera.
  2. If Android asks, allow your browser to install unknown apps.
  3. Open Zapstore and finish the onboarding.
Download APK

v2.0.4 · 71.2 MB · Android 10+

Verify the download

On a computer, run shasum -a 256 <the file you downloaded>. It should print: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

If you have zsp, Zapstore’s publishing tool, zsp utils extract-apk <the file you downloaded> works too. Its hash should be the same SHA-256: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

On the phone, AppVerifier should show this signing certificate: 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Source code All releases and notes

Get zsp

  1. Download the file for your computer.
  2. Make it executable and put it on your PATH.
  3. In your project folder, run zsp.

Have Go? This does the same:

go install github.com/zapstore/zsp/v2/cmd/zsp@latest
macOS, Apple silicon Linux, x86-64 Linux, arm64

v2.0.1 · macOS and Linux

Verify the download

On your computer, run shasum -a 256 <the file you downloaded>. It should print the SHA-256 for the one you chose.

macOS, Apple silicon · 18.6 MB 99018fb9744e5ace2b44557550dc333496239912c0e9b1137266d4922c803346

Linux, x86-64 · 23.8 MB 1ef5373f8ecd9ba63d2c3fab98abb0d31b2244a2aac31b3749fb205c7d5f5b38

Linux, arm64 · 22.1 MB e421005ee47cba58293dce4277bb784e4cfe706dbbcb8617d671629d0238be18

Source code All releases and notes