App analysis · 20.10.2026

Yubico Authenticator

com.yubico.yubioath · version 7.4.2

0SDKs found

0companies

0companies outside the EEA

2sensitive permissions

In short

SDKs found: 0. Companies: 0, of which outside the EEA — 0. Sensitive permissions: 2 — all code inside the app, including embedded SDKs, can use them.

Sensitive permissions (2)

camera — android.permission.CAMERA
NFC: reading cards, documents and tags — android.permission.NFC

All manifest permissions (5)

android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.HIDE_OVERLAY_WINDOWS
android.permission.NFC
com.yubico.yubioath.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: com.yubico.yubioath.apk (30.2 MB)

Package: com.yubico.yubioath · version 7.4.2 (code 703094)

Android: minimum API 24, target API 37

File SHA-256: 9cd0d4832eb3208263a0fc50177680068bfaddda5d53b36378209b42720a9948

Developer signature (SHA-256): d8678c5ee2c5e8f80d5d24f664d86ef3f8ed69191489d54d66495f766a256d47

Signed by: fdroid.org (ORG, UK) · outside EEA · key since 2013-09-03

File source: F-Droid (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app