Is Snaptube Safe? What We Checked and What We Found

Updated Current version 7.65.0By Editorial team

Short answer

The official Snaptube 7.65.0 APK, hash cf18df14e1ad…, installed and behaved like a normal downloader on our emulator test on 2026-09-29. It is made by an identifiable company and its file can be verified. It is not risk-free: it shows ads, asks for broad permissions, and in 2019 shipped an ad-fraud SDK that was later removed. Modified copies are where malware shows up.

What we checked on Snaptube 7.65.0

On 2026-09-29 we downloaded the installer from snaptube.com, computed its SHA-256, read the package manifest and signing certificate with Android's build tools, installed it on an Android 15 emulator, and used it to search for and download a video. The table below is the record of that check. The same file is what the download buttons on this site serve.

CheckResult
Sourcesnaptube.com official installer, build folder dated 2026-08-18
Packagecom.snaptube.premium, version 7.65.0 (code 76550110)
Signing certificateIssued to CN=wandoujia, O=wandoulabs, Beijing; certificate SHA-256 1bb6854e6a5dac4c08afde8167ac513bc994d9e7775a795c8b882fded334fe9e. The same certificate must sign every genuine Snaptube build.
SHA-256cf18df14e1ad4c097a9406efd409094cfd42b07771dade129ee47d08b3a32e75
VirusTotalLook up this hash on VirusTotal. If no report exists yet, upload the file there; the result is tied to the hash.
InstallInstalls on Android 5.0 (Lollipop)+; targets Android 15; contains arm64-v8a and armeabi-v7a native code
Behaviour on first runLanguage picker, notification permission prompt, then the Download tab. No account required. Ads appear in search results (marked AD).
Download testSearched a public-domain video, downloaded it at a chosen resolution, played it in the Play tab. No unexpected prompts.
Verify it yourself

Hash the file you downloaded and compare it with the SHA-256 above. On Android, Files by Google or Hash Droid can do this; on Windows, run certutil -hashfile Snaptube_7.65.0.apk SHA256; on a Mac, shasum -a 256 in Terminal. A match means you have the same bytes we tested.

Every permission it asks for, and why

These are the permissions declared in the current APK's manifest. Android grants some automatically and asks you for others at the moment they are needed. Several are normal for a downloader; a few are broader than we would like and are marked as such.

Permissions declared in the Snaptube 7.65.0 manifest.
PermissionWhat it is forOur view
INTERNET, ACCESS_NETWORK_STATE, ACCESS_WIFI_STATEFetching videos and checking whether you are on Wi-Fi before large downloadsExpected
READ/WRITE_EXTERNAL_STORAGE (Android 12 and below), MANAGE_EXTERNAL_STORAGE (Android 11+)Saving downloads to the snaptube folder and reading media for the playerExpected, but All files access is broad; it is the permission Android shows as a dedicated screen
FOREGROUND_SERVICE and its DATA_SYNC, MEDIA_PLAYBACK and SPECIAL_USE variantsKeeping downloads running and music playing when the app is in the backgroundExpected
POST_NOTIFICATIONSDownload progress notifications on Android 13+Expected; you can decline it
SYSTEM_ALERT_WINDOWThe floating mini player over other appsExpected for that feature; only granted if you turn it on
WAKE_LOCKPreventing sleep during a downloadExpected
REQUEST_INSTALL_PACKAGES, REQUEST_DELETE_PACKAGESInstalling its own updates from inside the appExpected for an app not on Play
QUERY_ALL_PACKAGES, GET_INSTALLED_APPSListing other installed apps, used for share targets and for advertisingBroader than necessary. Google restricts this permission on Play precisely because it reveals your app list
PACKAGE_USAGE_STATSUsage-access dataBroader than necessary. Android only grants it through a settings screen; we recommend leaving it off
KILL_BACKGROUND_PROCESSES, REORDER_TASKS, GET_PACKAGE_SIZEHousekeeping and task orderingMinor; common in apps of this age
com.google.android.gms.permission.AD_IDReading the advertising ID for ad targetingExpected in an ad-supported app; you can reset the ID in Android settings

In short: the app can do what a downloader with a player and ads needs to do, plus see what other apps you have installed. It does not request contacts, SMS, call logs, camera, microphone or location, and it does not request device-admin or accessibility access, which are the permissions that distinguish adware and spyware from an ordinary ad-supported app.

The 2019 Mango SDK report and what changed

In October 2019 the mobile security company Upstream published research from its Secure-D platform showing that Snaptube was generating fraudulent ad clicks and attempting premium digital service sign-ups in the background on users' phones. Upstream attributed the behaviour to a third-party component called Mango SDK bundled inside the app, reported tens of millions of blocked suspicious transactions, and noted that the traffic was invisible to the user. It was a serious finding and it was widely covered.

Snaptube's developer said the SDK came from an outside advertising partner and that it had been removed. The current permission list above contains nothing that would enable silent premium sign-ups (no SMS or call permissions). That is why our verdict on the official app is positive while the history is still worth knowing: it is the reason to verify what you install rather than to avoid the app.

Why Snaptube is not on Google Play

Google Play's developer policy does not allow apps whose purpose is downloading YouTube content, because that breaks YouTube's terms of service. Snaptube's core feature is exactly that, so it has never been listed. This is a policy matter, not a security verdict; the same rule keeps VidMate and TubeMate off Play.

Two consequences. First, you install from an APK, which means Android shows the unknown-sources and Play Protect screens; they appear for every sideloaded app. Second, apps named Snaptube that you do find on Play are unrelated; they use the name to catch searches. Steps for installing safely are on the the install steps.

Using Snaptube is legal. It was not named in the app-blocking orders India published from 2020 onward, and we found no ban in Brazil or Indonesia. What can be unlawful is what you download: saving copyrighted video to redistribute it infringes copyright everywhere, while saving a video for your own offline viewing is generally tolerated but breaks most platforms' terms of service.

The distinction matters in practice. YouTube can act against an account that uses third-party clients, so do not sign in to your Google account inside Snaptube. If you never sign in, there is no account for a platform to act against.

Who makes Snaptube

Snaptube launched in 2014. The company behind it presents itself as Mobiuspace, which reports Guangzhou, China as its base; store listings such as Uptodown name the publisher as Aquila Space (Hong Kong) Company Limited. The APK's signing certificate is issued to Wandoujia (Wandou Labs, Beijing), the team that originally built the app, and we checked that certificate on the file we host. A genuine build must be signed with the same key.

The app's Chinese origin is a frequent search question and is simply a fact, not a security finding. What matters is the permission list above and whether the file is genuine.

How to tell an original APK from a fake

Using the app with the least exposure

  1. Decline the notification prompt if you do not need progress alerts; you can enable it later.
  2. Do not grant Usage access or the floating-window permission unless you use the floating player.
  3. Reset your advertising ID in Android Settings, Privacy, Ads, and opt out of personalised ads.
  4. Never log in to YouTube or any account inside the app.
  5. Update from the latest file rather than from random links; each update here comes with a new hash. Everyday usage questions are in the guides.
  6. If you want no ads, buy VIP inside the app or switch to an open-source downloader from the alternatives page. Do not install a mod to remove ads.

Safety questions

Is Snaptube safe to download in 2026?

Yes, if you download the official 7.65.0 build and verify the SHA-256 published on this site. The VirusTotal report for that hash is linked above.

Does Snaptube have a virus?

The official APK does not. Modified Snaptube APKs from unofficial sites frequently contain adware, which is where the reputation comes from.

Does Snaptube steal data?

The current build requests no contacts, SMS, call, camera, microphone or location permissions. It can see your installed app list and advertising ID, which are used for ads. The 2019 incident involved fraudulent ad traffic, not theft of personal data.

Is Snaptube a Chinese app?

Yes. It is operated by Mobiuspace, which reports Guangzhou as its base, is published on stores under the Aquila Space (Hong Kong) name, and is signed with a certificate issued to Wandoujia in Beijing. It was not named in India's published app-blocking orders.

Is Snaptube banned in India?

No. It was not named in the app-blocking orders published from 2020 onward and remains available. Downloading copyrighted material for redistribution is illegal regardless of the app.

Why does Play Protect warn me about Snaptube?

Play Protect warns about every app installed outside Google Play. If the warning names a specific threat rather than a generic unknown-app notice, the file is not the official one.

Is Snaptube safe for kids?

The app has no content filter and shows ads, and its search returns anything the source sites return. Treat it like an unfiltered browser.

The exact file described on this page, with its SHA-256 and VirusTotal report.

Editorial team · get-snaptubeapk.com

Installs every build listed here on a real Android phone and an emulator, records the SHA-256 of the file and checks it on VirusTotal before it goes live. About this site.