On iOS: tap the share button in browser => add to home screen
On Android: tap the 3 dot menu button in browser => tap “install” or “add to home screen”
Hermit isn’t open source. This makes the code not publicly auditable, which means that verification of security by a third party is impossible.