# F-droid update is not reliable

**URL:** <https://community.blokada.org/t/f-droid-update-is-not-reliable/26701>\
**Category:** Announcements\
**Tags:** help-needed, dns, android\
**Created:** [September 23, 2022, 12:21pm UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701 "2022-09-23T12:21:27Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Reda\_Labdaoui](https://dub1.discourse-cdn.com/flex017/user_avatar/community.blokada.org/reda_labdaoui/32/14065_2.png) [@Reda\_Labdaoui](https://community.blokada.org/u/Reda_Labdaoui)\
**Post date:** [September 23, 2022, 12:21pm UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/1 "2022-09-23T12:21:27Z")

</div>

Hello friends,

I am sharing this short announcement since so many of you have been encountering issues with the latest F-droid update of Blokada 5 v22.3.8 and I wanted to clarify that Blokada team did not share any updates on F-droid.

We have stopped updating Blokada on F-droid for a while now, and the issues encountered just to show that the apk available on F-droid is not reliable. We checked the APK and there were no threats or malicious code that could threaten your phone’s activity.

THE VERSION SHARED ON F-DROID IS **SAFE** BUT HAS SOME SMALL ISSUES LIKE THE ERROR MESSAGE ABOUT THE PRIVATE DNS.

I would like to invite all the users who have downloaded Blokada’s update from F-droid to delete it and install it from **the one and only reliable source for downloading Blokada 5 and it’s our website** [blokada.org](https://blokada.org) .

---

<div class="post-metadata">

**Author:** ![manny](https://avatars.discourse-cdn.com/v4/letter/m/dec6dc/32.png) [@manny](https://community.blokada.org/u/manny)\
**Post date:** [September 27, 2022, 7:50am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/6 "2022-09-27T07:50:56Z")

</div>

Who shares updates of Blokada on F-Droid?  
Who takes care of the F-Droid channel?  
Why isn’t it reliable?

I as a Blokada and F-Droid user would feel much better, if F-Droid was reliable.

---

<div class="post-metadata">

**Author:** ![StickyMick](https://dub1.discourse-cdn.com/flex017/user_avatar/community.blokada.org/stickymick/32/2304_2.png) [@StickyMick](https://community.blokada.org/u/StickyMick)\
**Post date:** [September 27, 2022, 8:40am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/7 "2022-09-27T08:40:09Z")

</div>

Recently, I’ve had problems updating apps on f-droid due to the apps being signed with different keys despite the original install coming from f-droid itself. No choice but to uninstall and reinstall.

---

<div class="post-metadata">

**Author:** ![balboah](https://dub1.discourse-cdn.com/flex017/user_avatar/community.blokada.org/balboah/32/38_2.png) [@balboah](https://community.blokada.org/u/balboah)\
**Post date:** [September 27, 2022, 8:58am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/8 "2022-09-27T08:58:04Z")

</div>

More about this topic here:

> [@Can Blokada confirm is the suspicious release from F-Droid wasn't dangerous?](https://community.blokada.org/t/can-blokada-confirm-is-the-suspicious-release-from-f-droid-wasnt-dangerous/26702/9):
>
> This was a bit unexpected for me as well. Here you can see the change that was made on F-droid: [https://gitlab.com/fdroid/fdroiddata/-/commit/f325ad20b75ac91174cd996bc2b09c25460ab825](https://gitlab.com/fdroid/fdroiddata/-/commit/f325ad20b75ac91174cd996bc2b09c25460ab825) It appears nothing malicious was embedded in this release, however it triggered a new kind of bug at start up since it hasn’t been tested by Blokada at all. So it appears that any random guy can submit changes without any kind of approval (including editing the source code and behavior) to any app hosted on F-dr…

---

<div class="post-metadata">

**Author:** ![StickyMick](https://dub1.discourse-cdn.com/flex017/user_avatar/community.blokada.org/stickymick/32/2304_2.png) [@StickyMick](https://community.blokada.org/u/StickyMick)\
**Post date:** [October 7, 2022, 5:39am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/9 "2022-10-07T05:39:28Z")

</div>

Oh wow!! 😦. This is probably why you get a certificate error when updating some apps that were originally installed from F-Droid.  
It might be worth asking on the F-Droid Forums to see if anyone can shed light on the issue.

---

<div class="post-metadata">

**Author:** ![bbnn](https://avatars.discourse-cdn.com/v4/letter/b/e47c2d/32.png) [@bbnn](https://community.blokada.org/u/bbnn)\
**Post date:** [October 15, 2022, 7:33pm UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/10 "2022-10-15T19:33:20Z")

</div>

Is there a way to import settings from fdroid ver to non fdroid?

---

<div class="post-metadata">

**Author:** ![Reda\_Labdaoui](https://dub1.discourse-cdn.com/flex017/user_avatar/community.blokada.org/reda_labdaoui/32/14065_2.png) [@Reda\_Labdaoui](https://community.blokada.org/u/Reda_Labdaoui)\
**Post date:** [October 16, 2022, 9:16am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/11 "2022-10-16T09:16:20Z")

</div>

Not if you only have a libre account, your settings would be lost once you delete the app.

---

<div class="post-metadata">

**Author:** ![tuxayo](https://avatars.discourse-cdn.com/v4/letter/t/258eb7/32.png) [@tuxayo](https://community.blokada.org/u/tuxayo)\
**Post date:** [October 18, 2022, 5:20am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/12 "2022-10-18T05:20:03Z")

</div>

You can use Neo Backup is you have root access on your phone [Neo Backup | F-Droid - Free and Open Source Android App Repository](https://f-droid.org/packages/com.machiav3lli.backup/)

Or if you have knowledge about how to use command line tools, the `adb backup` and `adb restore` commands should work. There are many tutorials online about how to use them.

---

<div class="post-metadata">

**Author:** ![tuxayo](https://avatars.discourse-cdn.com/v4/letter/t/258eb7/32.png) [@tuxayo](https://community.blokada.org/u/tuxayo)\
**Post date:** [October 18, 2022, 5:22am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/13 "2022-10-18T05:22:16Z")

</div>

That’s something backed into Android. It’s impossible to switch app source without having to reinstall due to being signed with different keys. The only way would be for devs to wait for F-Droid update and publish the resulting APK to the Play Store.

---

<div class="post-metadata">

**Author:** ![tuxayo](https://avatars.discourse-cdn.com/v4/letter/t/258eb7/32.png) [@tuxayo](https://community.blokada.org/u/tuxayo)\
**Post date:** [October 18, 2022, 5:35am UTC](https://community.blokada.org/t/f-droid-update-is-not-reliable/26701/14 "2022-10-18T05:35:33Z")

</div>

> [@manny](#):
>
> Who shares updates of Blokada on F-Droid?  
> Who takes care of the F-Droid channel?

F-droid themselves, the usual process is someone submits a script that will generate an APK a new app. Then it’s reviewed and then the app is published.

> [@manny](#):
>
> Why isn’t it reliable?

**If I understand correctly** , to package Blokada, the script had to be a bit complex to implement some changes to comply with the very strict privacy and full opensourceness requirements of F-Droid’s official repo. I think there is controversy about to what extent these changes are actually needed (I didn’t took enough time to understand everything) but the result is that they caused unintended effects.
