Skip to content

Sepia

GitHub munzzyy/sepia

Install Sepia

Download Zapstore

Download
QR code for zapstore.dev/download
  • Scan the code with your phone’s camera
  • Tap Download anyway if the browser warns about the file
  • Allow your browser to install unknown apps if Android asks
  • Open Zapstore and finish the onboarding

Open Sepia in Zapstore

Open
QR code to open Sepia in Zapstore
  • Scan the code to open Sepia in Zapstore, or search for it there
  • Tap Install, and Download if Zapstore asks you to confirm the developer
  • Confirm in Android’s install dialog. Allow Zapstore to install unknown apps if Android asks

Unclaimed app

The catalog lists Sepia from GitHub munzzyy/sepia and signs its releases. The developer has not claimed it. The file is still checked before you install it.

Are you the developer? Cryptographically prove you hold the key that signs it.

How trust works

Share images without oversharing. X-ray files to see hidden data like GPS or thumbnails. Redact with ink and pixelation, then prove the export is clean by re-opening it.

Photos and screenshots say more than you think: where you were, what phone you own, sometimes a hidden copy of the uncropped shot or a video clip appended by motion-photo mode.

Sepia is the step before you hit send:

  • X-ray: see everything the file says about you, ranked by severity. GPS in plain words, the hidden thumbnail shown, trailing data called out.
  • Redact: ink and pixelation burned into the pixels, plus crop. Where the device supports code detection, QR codes are found and offered for covering.
  • Prove it: the export is re-encoded from scratch, then Sepia re-opens its own output and shows you what is (and is not) still inside.

Everything happens on your device. This app has no INTERNET permission: the operating system will not let it open a connection, and you can check the manifest instead of trusting a promise.

Runs on Android 9 and newer, with Android System WebView 108 or newer. Android 9 has had no security fixes since January 2022, so on a phone that old Sepia works, but the phone itself is easier to break into.

No accounts, no analytics, no dependencies. GPL licensed.

Summary generated by Zapstore from source.

Original description, as the developer published it.

Zap Sepia

Zapping anonymously. Sign in to zap with your identity.

No developer has verified this app yet, so sats go to npub1gnwq4…thdn3y, the catalog that brought it to you.

Amount in sats

Latest release

Oct 7, 2026

Unclaimed app No Google servicesWorks offlineNo source

The catalog lists this app from GitHub munzzyy/sepia and signs its releases. The developer has not claimed it. Are you the developer? Claim your app

Data stays on the phone.

Release notes

  • On Android, a photo's location showed as "0.00000, 0.00000" because the system zeroes GPS for apps with no permissions. Sepia now says the coordinates were hidden from it and that the original file still has them.

Verify what you install

sha256 sepia-0.6.2.apk  2c48b62e2ef71807c5ea232f6a219969554c3aea7597f5742c76c7f6bd29a64f
signing cert sha256  ad9d5b2504baf0fc2e888f6bd08cd7a63a5342071b6d358b7d64d6a75d503a44

sepia.apk is the same file as sepia-0.6.2.apk under a stable name.

Comments

Loading comments…

See more

Get Sepia the private way

Updates checked on your device, and every release verified before it installs.

Get Zapstore for Android

  1. Tap Download APK below.Scan the code with your Android phone’s camera.
  2. If Android asks, allow your browser to install unknown apps.
  3. Open Zapstore and finish the onboarding.
Download APK

v2.0.4 · 71.2 MB · Android 10+

Verify the download

On a computer, run shasum -a 256 <the file you downloaded>. It should print: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

If you have zsp, Zapstore’s publishing tool, zsp utils extract-apk <the file you downloaded> works too. Its hash should be the same SHA-256: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

On the phone, AppVerifier should show this signing certificate: 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Source code All releases and notes

Get zsp

  1. Download the file for your computer.
  2. Make it executable and put it on your PATH.
  3. In your project folder, run zsp.

Have Go? This does the same:

go install github.com/zapstore/zsp/v2/cmd/zsp@latest
macOS, Apple silicon Linux, x86-64 Linux, arm64

v2.0.1 · macOS and Linux

Verify the download

On your computer, run shasum -a 256 <the file you downloaded>. It should print the SHA-256 for the one you chose.

macOS, Apple silicon · 18.6 MB 99018fb9744e5ace2b44557550dc333496239912c0e9b1137266d4922c803346

Linux, x86-64 · 23.8 MB 1ef5373f8ecd9ba63d2c3fab98abb0d31b2244a2aac31b3749fb205c7d5f5b38

Linux, arm64 · 22.1 MB e421005ee47cba58293dce4277bb784e4cfe706dbbcb8617d671629d0238be18

Source code All releases and notes