Changelog
What's new
Every version of zcrypt, in plain words. We write these by hand so you can see what changed without reading commit messages.
- v0.1.8Upcoming
- New: 13
- Improved: 8
- Fixed: 3
- Security: 9
Not released yet. This is what is lined up for the next version.
zcrypt now speaks eight languages all the way through, Spaces got proper pages, and a lot of privacy work happened quietly in the background.
Open this versionNew - The whole app and the website are now translated into Arabic, German, Spanish, French, Russian, Urdu and Chinese, not just the menus.
- Spaces moved from pop-up windows to real pages with their own links, and you can drive them from the keyboard.
- Adding files to a Space keeps working in the background while you carry on with something else.
- Your profile photo now shows wherever your avatar appears, instead of just an initial.
- One-line installers for macOS, Linux and Windows that avoid the unverified-app warning, plus a Homebrew tap on the download page.
- A self-hosting kit: run your own zcrypt server on any Linux box behind a Cloudflare Tunnel.
- The site suggests a language based on your country instead of switching it behind your back.
- This changelog, with a page for every version, an RSS feed and a What's new dialog in the app.
- A quick settings panel behind the gear icon: theme, light or dark, language and advanced mode without leaving the page.
- A Get the apps button: scan a QR code for the Android app, or download the desktop app for your system in one click.
- The command palette (Ctrl or Cmd + K) can now do things: upload, new folder, lock the vault, switch theme and more.
- Custom themes get a matching light and dark version worked out from your colors, so they stay readable in both.
- Twelve new background designs for custom themes, all following your accent color.
Improved - Share links are created faster, especially when you share many files at once.
- The update dialog now tells you what actually changed instead of a vague promise.
- Page titles no longer repeat the name twice, and the sitemap now has real dates.
- One bigger search bar on the vault page, with your recent files right in its dropdown.
- Every toggle is now an iOS-style switch in your theme color, easy to see when it is off.
- Deleting or moving files happens straight away with an Undo button, instead of asking you first.
- A tidier vault: one slim storage notice, clearer list and grid icons, a storage ring in the sidebar, friendlier empty states, right-click menus and smoother loading.
- Phones and tablets get a cleaner layout: the lock is always reachable, filters stick to the top and nothing spills off the screen.
Fixed - Spaces pages ask you to unlock instead of failing, the file picker no longer crashes, and a Space's sealed name stays readable after a key rotation.
- The Pad, Send and Transfer pages show their steps and closing text again.
- With the theme set to System, the app now follows your device's light or dark switch straight away.
Security - Space names are now sealed on your device, like file names already are.
- Your device remembers the sharing key it first saw for each person and warns you if it later changes.
- Passphrases have a sensible minimum length now, with hints in every language.
- The app never sends a file name or hash in the clear, and the server will refuse an old app that tries, once the server is updated.
- The hash for Send links is sealed too, so even that small clue stays with you.
- The content security policy is now enforced by default instead of only reporting, which makes injected scripts much harder to run.
- Sign-in sessions now store only a rough IP address too, and login records no longer keep the email you typed.
- Groundwork for one account master key, so a future version can make passphrase changes painless. It is off by default.
- Very old versions of the app will be told to update before uploading once the server is updated, so they can't write unprotected names.
- v0.1.7Latest
- New: 9
- Improved: 6
- Fixed: 5
- Security: 5
A friendlier first week: a guided tour, a way to tell us when something breaks, redesigned Spaces and a vault that opens faster.
Open this versionNew - A short guided tour shows new people around the vault. You can replay it any time from the account menu.
- Report a bug straight from the account menu, with a screenshot if you like.
- Rate zcrypt from inside the app. We read every one, including the grumpy ones.
- Spaces were redesigned, with clearer roles for who can view, edit or manage.
- A language picker sits next to the theme toggle, with eight languages to choose from.
- Pad, Send and Transfer now match the rest of the site.
- Anonymous Send links are capped at 50 MB per file and 500 MB per day, and a burn-after-read file is deleted once it has been read.
- The Android app checks for updates for real, instead of cheerfully saying you are up to date.
- You can export your account data, delete your account, and see and sign out your signed-in devices.
Improved - The vault loads in parallel and shows what it remembers while it refreshes, so it feels quicker.
- A health banner explains what is wrong with a storage connection and what to do about it.
- A small pill tells you when a new desktop version is ready.
- Folder links are quicker to create.
- Signing in or out in one tab now carries over to your other tabs.
- One click resumes an unfinished upload from the same device.
Fixed - Shared files and folders show their real names instead of placeholders.
- Send replaces a storage repo that was deleted and retries, and lets a burn-after-read link be read to the end.
- Dragging files onto a folder works reliably, and an ended session sends you to sign-in instead of a blank page.
- Desktop uploads land in the folder you have open.
- Two tabs refreshing at once no longer log you out.
Security - Two-factor authentication is now asked on every kind of login, including magic links and OAuth.
- The key for a Transfer no longer passes through the relay.
- Share download counts are counted by the server, so limits can't be skipped.
- Desktop and Android uploads seal file names and use a keyed content hash.
- Updated Next.js to patch a remote code execution vulnerability.
- v0.1.6
- New: 6
- Improved: 3
- Fixed: 4
- Security: 2
The homepage was rebuilt around the product, Insights got a proper redesign, and the vault gained a pile of small conveniences.
Open this versionNew - A new homepage that shows the drive first and explains later.
- Insights was redesigned, with a date range, a headline numbers card and a swipeable layout on phones.
- A quick filter popover, an undo toast, drop-anywhere uploads, rename in place and a recently viewed list.
- Move or share many files at once.
- A four-tab bar on phones that feels native.
- Shared storage is capped at 1 GiB per user, so the free tier stays fair.
Improved - Every marketing page now shares the homepage's look.
- Folder and document tiles in the vault now have the same layered look as the homepage.
- Marketing pages load without waiting for the sign-in check.
Fixed - The homepage no longer flashes or replays its entrance when it loads.
- Logging out on the web now properly ends the session.
- Insights shows honest messages when it is rate limited.
- Mac updates no longer point at a page that does not exist.
Security - The refresh token is no longer kept in the browser's local storage.
- A secret scanner now checks our code for accidentally committed keys. For now it only warns.
- v0.1.5
- New: 4
- Improved: 1
- Fixed: 6
- Security: 4
Mostly work you only notice when it is missing: stable download links, safer metadata and a lot of small repairs on phones.
Open this versionNew - One stable download link per platform, always pointing at the newest build.
- The zcrypt core engine is now MIT licensed, like the rest of the project.
- A profile panel for your name, avatar and password, so you can change your password without a reset email.
- The desktop app can now update itself with signed updates, and Settings has an App updates panel. Installs older than 0.1.5 still have to update by hand once.
Improved - The app asks you to confirm before it changes a plan or removes a vault member.
Fixed - Phone screens no longer lose their edges, even with an out-of-date system WebView.
- Links that open outside the app work on mobile now.
- The desktop updater stops offering updates it can't install for .deb and .rpm users.
- The download page stops showing a stale version when GitHub is slow.
- The download page no longer mistakes phones for desktops, and shows Linux packages.
- The landing page stopped rendering as empty voids.
Security - Details that used to reach the server in the clear are now sealed on your device.
- The server stops storing plaintext file names, and audit, Pad and Send records keep only a rough IP address.
- Old audit log entries are cleared automatically after a while.
- Patched versions of the Go runtime, Tauri and several libraries.
- v0.1.4
- New: 12
- Improved: 3
- Fixed: 1
- Security: 5
This was a much bigger release than it first looked: end-to-end Spaces, shareable folders, resumable transfers, themes and a rebuilt desktop app, plus the cancel button.
Open this versionNew - Spaces (shared vaults) got real end-to-end keys: every member has their own key, you can add files and folders, set a size limit, compare key fingerprints and re-key when someone is removed.
- Share a whole folder with a public link, and download it as one zip.
- Unfinished uploads survive a page reload and can be resumed or discarded, downloads can pause and resume, and a single file can be up to 10 GB.
- A dedicated Insights page for how you use your storage.
- Per-device colour themes, a custom theme with your own accent and background, and your own icon and colour for files and folders.
- A reworked audio and video player that recognises many more formats and moves on to the next track by itself.
- The vault was reworked for phones, with a better file grid and drag-to-select.
- The desktop app now runs on a new built-in engine instead of a separate helper program, with Touch ID unlock on Mac and auto-lock after a while of inactivity.
- The first Android build, as a beta APK you install yourself.
- Connecting Telegram is guided now, and it finds your chat ID by itself.
- The Cancel button in the desktop app now really cancels a running upload or download.
- When a storage repository fills up, the desktop app moves on to a fresh one by itself.
Improved - Downloads are decrypted in background workers and large files stream straight to disk.
- Live updates reconnect with growing pauses instead of hammering the server.
- Switching theme no longer plays a heavy transition.
Fixed - Emails link to the right address.
Security - New uploads have their file names encrypted on your device, and the content hash is keyed per user.
- Two-factor sign-in got stricter checks, backup codes, and its secrets are now encrypted at rest.
- Admin actions go into a tamper-evident audit log, and destructive ones ask for extra confirmation.
- A content security policy was added in report-only mode, so it watched for problems without blocking anything yet.
- Updated Go and a text library to clear known vulnerabilities.
- v0.1.3
- Improved: 1
- Fixed: 1
A small release for macOS users and for the download page.
Open this versionImproved - The download page falls back to a known release when GitHub can't be reached.
Fixed - The Mac build is now ad-hoc signed. That is not Apple's notarization, so macOS may still warn you before opening it.
- v0.1.2
- Fixed: 2
Two small fixes that make the desktop app feel less rough.
Open this versionFixed - The tray icon is now a clean single-color icon that fits your menu bar.
- The desktop app is now allowed to talk to the zcrypt server.
- v0.1.1
- New: 7
- Improved: 2
- Fixed: 1
- Security: 1
Everything got a page of its own: downloads, a unified explorer and viewers for the files you actually have.
Open this versionNew - The first desktop app, which signs in through your system browser. It was rough, and we said so.
- A download page that always points at the latest release.
- A single explorer with a grid view by default and adjustable density.
- Viewers for many file types, including a rebuilt PDF viewer and blurred previews for images while they load.
- Bulk delete and a revamped upload queue.
- A transfer manager and per-folder encryption.
- A comparison with Proton Drive.
Improved - Opened files are cached and the next ones are prefetched, so they open faster.
- Background sync backs off when nothing is happening.
Fixed - A wrong passphrase now lets you try again instead of leaving a broken file.
Security - A database driver update patches a published vulnerability.
- v0.1.0
- New: 7
- Security: 1
zcrypt starts: you encrypt your files on your device and keep them wherever you like.
Open this versionNew - Upload and download files, encrypted and compressed on your device before they go anywhere.
- Connect your own GitHub, GitLab, Hugging Face or Telegram account as storage.
- Share files with a link.
- Shared vaults, Send, Pad, Transfer and a dead man's switch.
- Accounts with email verification, password reset, two-factor sign-in, magic links and sign-in through outside providers.
- A file table with sorting, selection, previews and downloads.
- An admin panel, plans and pricing.
Security - A first round of security hardening and tests.
Get the latest
Updates are free, and the desktop app can update itself. Grab the newest build for your device.