Android mobile usage

The APK is configured for https://stashvlt.astm.co.za by default.

Install and first run

1. Download the APK from /download/.
2. Install it on Android. You may need to allow installs from your browser or file manager.
3. Open StashVlt. The app creates a device RSA recipient key locally.
4. Open Settings. Confirm Relay URL is https://stashvlt.astm.co.za.
5. Choose or keep the generated blind inbox ID and tap Save settings.
6. Copy the device public key and send it to the institution/agent that will encrypt packages for you.

Trust a sender

1. Ask the sender for its ECDSA public key and key id.
2. Paste the key id, display name, and PEM public key under Trusted sender import.
3. Tap Save trusted sender.

Read packages

1. Open Inbox and tap Refresh encrypted inbox.
2. Select a package.
3. Tap Decrypt selected package. Decryption happens on your device.

QR bundle flows

The Bundle tab creates signed, short-lived grants for a selected decrypted package, or direct encrypted QR bundles for sports signup and checkout-style flows. Keep QR payloads short for scanner reliability.