Aquí hi ha 8 versions de Picocrypt-NG, des de 4 de març del 2026 fins a l’actual, 2.18. Cadascuna enllaça amb els instal·ladors del mateix desenvolupador.
| Versió | Data | Mida | Fitxers |
|---|---|---|---|
| 2.18Darrera versió | 28 de juny del 2026 | — | 64 bits EXE (NSIS) Notes de la versióDownloads
───────────────┬───────────────────────────────────────┬──────────────────┬──────────────────────────────────────────────────────────┬────────┬─────────
Architecture │Windows │macOS │Linux │Android │Web
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86-64 (64-bit)│Installer · Portable · CLI │— │AppImage · .deb · Binary · CLI · Snap │APK │Open
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARM64 (AArch64)│— │DMG · CLI │Binary · CLI │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARMv7 (32-bit) │— │— │— │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86 (32-bit) │— │— │— │APK │
───────────────┴───────────────────────────────────────┴──────────────────┴──────────────────────────────────────────────────────────┴────────┴─────────
- 🌐 Web version — runs in any modern browser, nothing to install: https://picocrypt-ng.github.io/
- Android — universal APK (any device, larger): Download
- Windows 7/8 (legacy) CLI (x86-64): Download
- macOS builds are Apple Silicon (ARM64) only.
What's new in 2.18
- Desktop GUI: fixed the Linux desktop layout and output theming so the compact window keeps controls/results readable and visually consistent
- Windows installer: upgrades now replace the installed GUI executable in place, detect a running Picocrypt NG instance instead of silently leaving the old binary, and clean up the orphaned portable executable left by the previous upgrade path
- Android/F-Droid readiness: Android release tasks can now assemble unsigned release APKs for F-Droid source builds while GitHub release CI still requires the maintainer signing secrets for official upstream APKs
- Android reproducibility: gomobile AAR builds now use stable empty Go build IDs and stripped native debug metadata for libgojni.so, removing the build-id metadata drift that blocked F-Droid reproducible APK comparison
- Security maintenance: updated golang.org/x/image to v0.43.0 to include the TIFF decoder vulnerability fixes reported by govulncheck
- Package availability: the README now documents the third-party MacPorts port while keeping project-owned release channels distinct
Full changelog: https://github.com/Picocrypt-NG/Picocrypt-NG/blob/main/Changelog.md#v218
Verifying your download
Every artifact is signed with keyless cosign (a <file>.sigstore.json bundle ships next to it) and carries a GitHub build-provenance attestation. No keys to trust — the signature is bound to the exact GitHub Actions run that built the file.
Build provenance (easiest, needs the gh CLI):
gh attestation verify <file> --repo Picocrypt-NG/Picocrypt-NG
Cosign bundle (download the matching <file>.sigstore.json too):
cosign verify-blob <file> \
--bundle <file>.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/Picocrypt-NG/Picocrypt-NG/\.github/workflows/' |
| 2.17 | 20 de juny del 2026 | — | 64 bits EXE (NSIS) Notes de la versióDownloads
───────────────┬───────────────────────────────────────┬──────────────────┬──────────────────────────────────────────────────────────┬────────┬─────────
Architecture │Windows │macOS │Linux │Android │Web
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86-64 (64-bit)│Installer · Portable · CLI │— │AppImage · .deb · Binary · CLI · Snap │APK │Open
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARM64 (AArch64)│— │DMG · CLI │Binary · CLI │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARMv7 (32-bit) │— │— │— │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86 (32-bit) │— │— │— │APK │
───────────────┴───────────────────────────────────────┴──────────────────┴──────────────────────────────────────────────────────────┴────────┴─────────
- 🌐 Web version — runs in any modern browser, nothing to install: https://picocrypt-ng.github.io/
- Android — universal APK (any device, larger): Download
- Windows 7/8 (legacy) CLI (x86-64): Download
- macOS builds are Apple Silicon (ARM64) only.
What's new in 2.17
- Web app: encryption options: the in-browser tool at picocrypt-ng.github.io now supports paranoid mode, header comments, keyfiles (with an optional enforced order), Reed-Solomon error correction, force-decrypt (best-effort recovery of a damaged or modified volume, clearly flagged as unverified), and plausible deniability — all byte-compatible with the desktop app, so a volume created in the browser opens on the desktop and vice versa
- Web app: scope & privacy: the browser tool is fully client-side (files never leave your device) and handles files up to 1 GiB; volume splitting, recursive volumes, and multi-file or compressed archives remain desktop-only
- Web app: usability: the file selector is re-enabled after a completed operation, so a second encrypt or decrypt no longer requires reloading the page
- Internal: unified, stricter static analysis (gofumpt/goimports formatting and a curated golangci-lint set) across the codebase
Full changelog: https://github.com/Picocrypt-NG/Picocrypt-NG/blob/main/Changelog.md#v217
Verifying your download
Every artifact is signed with keyless cosign (a <file>.sigstore.json bundle ships next to it) and carries a GitHub build-provenance attestation. No keys to trust — the signature is bound to the exact GitHub Actions run that built the file.
Build provenance (easiest, needs the gh CLI):
gh attestation verify <file> --repo Picocrypt-NG/Picocrypt-NG
Cosign bundle (download the matching <file>.sigstore.json too):
cosign verify-blob <file> \
--bundle <file>.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/Picocrypt-NG/Picocrypt-NG/\.github/workflows/' |
| 2.16 | 18 de juny del 2026 | — | 64 bits EXE (NSIS) Notes de la versióDownloads
───────────────┬───────────────────────────────────────┬──────────────────┬──────────────────────────────────────────────────────────┬────────┬─────────
Architecture │Windows │macOS │Linux │Android │Web
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86-64 (64-bit)│Installer · Portable · CLI │— │AppImage · .deb · Binary · CLI · Snap │APK │Open
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARM64 (AArch64)│— │DMG · CLI │Binary · CLI │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARMv7 (32-bit) │— │— │— │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86 (32-bit) │— │— │— │APK │
───────────────┴───────────────────────────────────────┴──────────────────┴──────────────────────────────────────────────────────────┴────────┴─────────
- 🌐 Web version — runs in any modern browser, nothing to install: https://picocrypt-ng.github.io/
- Android — universal APK (any device, larger): Download
- Windows 7/8 (legacy) CLI (x86-64): Download
- macOS builds are Apple Silicon (ARM64) only.
What's new in 2.16
- Signed releases: every release artifact (Windows, macOS, Linux, AppImage, Snap, Android) is now signed with keyless cosign and published with a build-provenance attestation, so a download can be verified against the exact GitHub Actions workflow that produced it; the old SHA-256 text blocks in the release notes are dropped in favor of verifiable signatures
- Desktop: stable tooltips: advanced-settings tooltips no longer flicker or jump — the flicker-prone custom tooltip was replaced with the fyne-tooltip library (#79)
- Android: hardening: generated keyfile bytes and password buffers are zeroed after use, names of saved files are sanitized before writing, and the app opts out of Android cloud backup so volumes and settings are never copied off-device
- Android: clearer errors: a failure to start an operation is now surfaced to the user instead of being silently swallowed
- Privacy: no on-disk logs: the file-logging sink was removed, so the app never writes log files that could reveal file names or activity
- Reliability: incomplete output is cleaned up if an operation is interrupted mid-stream — split, recombine, and write failures no longer leave stray chunks or half-written files behind
- Internal: removed dead code across the crypto, volume, and app packages, pinned crypto/keyfile/encoding paths to known-answer test vectors, and fixed documentation drift (API.md, ARCHITECTURE.md, CONTRIBUTING.md)
Full changelog: https://github.com/Picocrypt-NG/Picocrypt-NG/blob/main/Changelog.md#v216
Verifying your download
Every artifact is signed with keyless cosign (a <file>.sigstore.json bundle ships next to it) and carries a GitHub build-provenance attestation. No keys to trust — the signature is bound to the exact GitHub Actions run that built the file.
Build provenance (easiest, needs the gh CLI):
gh attestation verify <file> --repo Picocrypt-NG/Picocrypt-NG
Cosign bundle (download the matching <file>.sigstore.json too):
cosign verify-blob <file> \
--bundle <file>.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/Picocrypt-NG/Picocrypt-NG/\.github/workflows/' |
| 2.15 | 15 de juny del 2026 | — | 64 bits EXE (NSIS) Notes de la versióDownloads
───────────────┬───────────────────────────────────────┬──────────────────┬──────────────────────────────────────────────────────────┬────────┬─────────
Architecture │Windows │macOS │Linux │Android │Web
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86-64 (64-bit)│Installer · Portable · CLI │— │AppImage · .deb · Binary · CLI · Snap │APK │Open
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARM64 (AArch64)│— │DMG · CLI │Binary · CLI │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARMv7 (32-bit) │— │— │— │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86 (32-bit) │— │— │— │APK │
───────────────┴───────────────────────────────────────┴──────────────────┴──────────────────────────────────────────────────────────┴────────┴─────────
- 🌐 Web version — runs in any modern browser, nothing to install: https://picocrypt-ng.github.io/
- Android — universal APK (any device, larger): Download
- Windows 7/8 (legacy) CLI (x86-64): Download
- macOS builds are Apple Silicon (ARM64) only.
What's new in 2.15
- Cross-platform passwords (Unicode normalization). Passwords are now normalized to Unicode NFC before key derivation, so a password containing accented or non-Latin characters typed on one operating system works on another (encrypt on macOS, decrypt on Windows/Linux, and vice versa).
- Android: folder & multi-file encryption. Encrypt an entire folder (directory structure preserved) or several files at once instead of only a single file, with a new Compress toggle in advanced settings.
- Android: screenshot protection. An optional Privacy & Security toggle (on by default) applies FLAG_SECURE to block screenshots and screen recording and hide the app in the recent-apps switcher.
- Android: smaller per-architecture APKs. Releases now ship per-ABI APKs (arm64-v8a, armeabi-v7a, x86, x86_64) alongside the universal APK.
- Linux: signed AppImage + delta updates. The AppImage is GPG-signed and ships AppImageUpdate (zsync) info for delta downloads.
⚠️ Password compatibility — read this if you use non-ASCII passwords
The new Unicode (NFC) normalization changes how non-ASCII passwords are processed. ASCII-only passwords are completely unaffected and stay compatible in every direction.
- Open an older volume in 2.15 or newer: ✅ Works. Decryption also tries the as-typed and decomposed forms, so volumes made by earlier versions still open.
- Open a 2.15+ volume in 2.15 or newer: ✅ Works — the password is normalized the same way on both ends, which is the point: the same password now decrypts across operating systems.
- Open a 2.15+ volume in a PRE-2.15 build (downgrade): ⚠️ Not guaranteed for non-ASCII passwords. Older builds do not normalize, so they only open such a volume if the password is entered in exactly its NFC form. (ASCII-password volumes remain compatible both ways.)
When you encrypt with a non-ASCII password, the desktop and CLI show a short advisory.
Full changelog: https://github.com/Picocrypt-NG/Picocrypt-NG/blob/main/Changelog.md#v215
SHA-256 checksums
macOS:
sha256(Picocrypt-NG.dmg) 1e8f6441070e757b429c7a85aa8c4d1970bf1de4712bf6dfdd8b8f2030270767
sha256(Picocrypt-NG-cli-macos) c942031c7a051f2dbb8dd7b6a5845db30dc2bf60584dec760d7eb7a18676ef4a
Windows Legacy CLI (Windows 7/8):
sha256(Picocrypt-NG-cli-Legacy.exe) 624BE9D2AF506857BA8D0E8B85051940B02BDF9FF16D19D7D2DAE2552FF46B12
Android (signed release APK):
sha256(Picocrypt-NG-android-arm64-v8a.apk) b46967fee3c30c2e077cc8a026c164fda440e0ac0b5a0189b3ad440a02cb56a2
sha256(Picocrypt-NG-android-armeabi-v7a.apk) 6e5746ad7939e1e197be560ba07d1d7ccbaca79b8af943 |
| 2.12 | 9 de juny del 2026 | — | 64 bits EXE (NSIS) Notes de la versiómacOS:
sha256(Picocrypt-NG.dmg) 24783885d5e0e3fada64b47c9374e9d2a90fb43bccd4a7ae78470127384d91ec
sha256(Picocrypt-NG-cli-macos) f81fe953572778760937b107ad28523789b378c5b2c996a7bbd9ef60ce67af40
Windows Legacy CLI (Windows 7/8):
sha256(Picocrypt-NG-cli-Legacy.exe) 3B0F9F4E89BA61D32774B0B488E62FF6B4FBFC3AAC63B3DA24C9A971696454D7
Android (signed release APK):
sha256(Picocrypt-NG-android-release.apk) 1b32e0c3c24be6a7d057d1915533da83de90ae42832d826ccc71e0fb08d355ba
Windows:
sha256(Picocrypt-NG-Setup.exe) DDC0F84B7BCC039CB7C7DA2E296BF08A0D69777B8CF7B14DC84F12F4DC6F2519
sha256(Picocrypt-NG-portable.exe) D85687B7380381E56A4BAACDF82EA0084E2D8F50D76650BD2A1ECE6930458999
sha256(Picocrypt-NG-cli.exe) 65C6D82239E3267616B78EB613B8C39F6CEAA5815FF1B553DCF1EB2ADD1660EA
Linux (Snap):
sha256(picocrypt-ng_2.12_amd64.snap) 32b013a10d0cec1a47330e70e7885df0c036e9bf85686e21b38845a520c0be41
Linux (amd64):
sha256(Picocrypt-NG) b493cba76b82681c4f9cf2e5ea87352b063aff77199489920973f47b752f0a26
sha256(Picocrypt-NG-cli) a9f18de0af9513926b105f31f00f1e1cf1a8546584326664850dd0ada3303505
sha256(Picocrypt-NG.deb) 845189205973bbf0ba188bd53de354adebd9619117a4bde69f77a17f7c858d16
Linux (arm64):
sha256(Picocrypt-NG-arm64) 8402adcbc1ced13b08293cbebba30245421af278a942c13a9d814fecbdb2c47f
sha256(Picocrypt-NG-cli-arm64) 8c6db5cd04ddad206c034e6f94d1bffaaddad2e152663f96c2ea3a2474383098 |
| 2.10 | 1 de juny del 2026 | — | 64 bits EXE (NSIS) Notes de la versiómacOS:
sha256(Picocrypt-NG.dmg) 82f8aad4284d51fc50aaebd2d839543940b42a47b0f0afeb3bdf7b265bc700d4
sha256(Picocrypt-NG-cli-macos) 23828d609fe1ceecb3b6067340d27d021da2c80aebc9c93dedd4395a072a4322
Windows Legacy CLI (Windows 7/8):
sha256(Picocrypt-NG-cli-Legacy.exe) 3214CD439D8D42BA119C1FB360D4A3FA08560FD6EDD6B128F13FEE93B18B9DC7
Android (signed release APK):
sha256(Picocrypt-NG-android-release.apk) c2506cb661d858f204f8aaa83da72bf87bcf44df21e089fd0c9059fd3d03eb42
Linux (Snap):
sha256(picocrypt-ng_2.10_amd64.snap) 089bef6429e9e451dbafe54cd2aa3bc56dfe6ed7c754563cf6bd950b8eb52bec
Windows:
sha256(Picocrypt-NG-Setup.exe) F5E9314E1EFFBB689569152B89291C31631563354E78AA9C6165424B3EB5A08D
sha256(Picocrypt-NG-portable.exe) A3E0D562669DAEEECB2779D0803E8AC7DC26870C6258927F1C8774F809512718
sha256(Picocrypt-NG-cli.exe) 4E3B303BE5073B46318041484F9B3D25B9596409E9817EFF5CD34BBCC9D41628
Linux (amd64):
sha256(Picocrypt-NG) e2835d7ad5b09f61e96579fc2104eb5d0a6d7d43d1090567e92220013bb9032c
sha256(Picocrypt-NG-cli) f3aa743dfb4fd67b31056ca17f62d4abb5e49edb44e416d827f51356862bd08a
sha256(Picocrypt-NG.deb) 40cd43eee382cfec4abbf71953929b49be6f5b5fefd36d908344e0ce1e2358a8
Linux (arm64):
sha256(Picocrypt-NG-arm64) 47799c9ed2a7d353cccb004b7073f47581996955e70d6bedc182cfde05032642
sha256(Picocrypt-NG-cli-arm64) 3428270e0f14aa27553968df85f97f5871fc1e58744578db63ec2b202dacb06f |
| 2.09 | 1 de maig del 2026 | — | 64 bits EXE (NSIS) Notes de la versiómacOS:
sha256(Picocrypt-NG.dmg) 33737df7f811ad5505a8ec4354fa60cc75ca900dbd74723d6dbd04a00033519e
sha256(Picocrypt-NG-cli-macos)
Windows Legacy CLI (Windows 7/8):
sha256(Picocrypt-NG-cli-Legacy.exe) 7E2455780172699D30E76743CAD3C62A4AEC28D1D1B350663D1FBF3A10D0D5BF
Android (signed release APK):
sha256(Picocrypt-NG-android-release.apk) 86265ce8e17bf41cae87fb1fa63ad6379aff67e36a54af922b136876011e9887
Windows:
sha256(Picocrypt-NG-Setup.exe) C4C5D152B95E52AAB438F03D792F98639F7DB53E5F829AD293F151E1BDF7E057
sha256(Picocrypt-NG-portable.exe) 11EF88E87380AE6DA3043D948B39B2E514B7FEB1556652DEBB316ABA91C8DC7C
sha256(Picocrypt-NG-cli.exe) 5C0AB2EDC0ED94B21D22D9A235EDEF723A65AE786963323C338B3EE5659A9A19
Linux (amd64):
sha256(Picocrypt-NG) d5f2583e79337bceadf29273f8c1532061df60cb9f6db8c07e07766122742f37
sha256(Picocrypt-NG-cli) 8d070154ea83345256f0051682736040cd18c33397a680fa26fb342af2844f9c
sha256(Picocrypt-NG.deb) 0405cfc484b4447c01007b5c387318648231c68449fac471091256e13d37e8d9
Linux (arm64):
sha256(Picocrypt-NG-arm64) 3801ca6dd616353d759e5f60eba7882778ec81ba6b49e3a17ec6b8ef5135bfb4
sha256(Picocrypt-NG-cli-arm64) 21e07ea9a4897f53f404d71bc29e72dd7651ef630f2d2ddaf76f975803528ff9 |
| 2.08 | 4 de març del 2026 | — | 64 bits Portable Notes de la versióWindows:
sha256(Picocrypt-NG.exe) DB9272BB9991CAD2A68BB4C5666672C82EF3A9E8925E47B4C1BF8485D3B1CCCF
sha256(Picocrypt-NG-cli.exe) FBA12B0D6C21ED51B283021BF5353569D10F317E6C5BA1432BAA742E52613429
Windows Legacy (Windows 7/8). This build includes Mesa3D software OpenGL rendering (GLES mode) for systems without graphics drivers. Keep all files together:
sha256(Picocrypt-NG-Legacy-Windows.zip) 3DD7B6154A477935D5119953B0CBCCB226B7B913E3AB452FB719CBB0C562FC5E
Linux (amd64):
sha256(Picocrypt-NG) a947f7b4f8fca44a12319926ab5ba37c9413c80a76f023ac31cbb436184121a1
sha256(Picocrypt-NG-cli) 11f88d7112720c229715ed10c32617feb1f5d04c042ed5901c73ec02c3032efc
sha256(Picocrypt-NG.deb) dff1f92ef8bd941e74ec12f1d3db375a76181192d0c147433c0bb4bfd98731f3
Linux (arm64):
sha256(Picocrypt-NG-arm64) 84fe2a627cc4a69dc283e2b824b5c4202cc0b8c34e403a6057cce495a0d2b1ac
sha256(Picocrypt-NG-cli-arm64) c8a4d69be195edbb87272e0317d4387c04d967e0ea221ba6a7922d5dd37781ef
macOS:
sha256(Picocrypt-NG.dmg) 62e8f977c3affa7d7be8be03a3466aedb487be9c427abf50ee599fca82d0b6b3
sha256(Picocrypt-NG-cli-macos) 26f750c587d52a6c607bad585151e36a4229ef05103b059ca00f788f2950158a |