Version 2.0.0
Latest July 2026A ground-up rewrite with a task-first experience, a modern authenticated-encryption engine, multiple identities with portable backup — and, so 1.x users lose nothing, the ability to open old files. This release supersedes the previous 1.2.0 Store version.
Added — new engine & core app
- Task-first interface with a Simple/Advanced two-layer design: Encrypt (file, folder, or text, with drag & drop), Decrypt (file or pasted message), Contacts, My Identity, and Settings.
- Modern crypto engine — authenticated AES-256-GCM or ChaCha20-Poly1305; protection by password (PBKDF2-SHA256), your own key or a person's key (RSA-3072 hybrid, RSA-OAEP-SHA256), or a raw session key.
- Self-describing
.eenccontainer that records how each item was protected, so decryption can auto-detect it. - Shareable identity cards (vCard
.vcf) and public-key export (.pem). - Single-instance guard, About/Splash screens showing the version, and a session-key generator plus a container inspector under Advanced mode.
Added — multiple identities & portable backup
- Multiple identities — keep separate keys (e.g. Work and Personal); create, switch, and delete them (the only identity can't be deleted). Existing single identities migrate automatically.
- Automatic key selection — an item encrypted for a specific identity opens against that identity, with a clear message if it isn't on this PC.
- Identity backup & restore — export an identity (private key included) as a passphrase-encrypted
.eeidfile that survives a reinstall or moves to another PC, then restore it there. Closes the previous permanent-data-loss gap for key-based encryption. - Bulk contacts — export all contacts to one card file, and import many at once (de-duplicated by fingerprint, malformed entries skipped).
Added — open legacy 1.x files (decrypt-only)
- The Decrypt screen recognizes and opens containers from the original EncryptEngine 1.x, auto-detected with no mode picking.
- Password items (
SALT:text blocks and.encv0files) and public-key items — the old key is detected on startup and shown as a read-only "Legacy identity (v1)".
Changed
- Encrypt / Decrypt buttons lock after a run until Reset, preventing accidental re-runs (a cancelled or invalid run stays retryable).
- Progress for every operation — an animated bar for text/folder phases and bulk contacts, byte-level progress for files.
- New app icon, in-app logo, and Store tiles, plus a wordmark splash.
Fixed
- Identity name no longer bleeds when switching identities (covered by a regression test).
- Build-number parsing for the auto-increment target.
Security
- Private keys are sealed at rest with Windows DPAPI (CurrentUser) and never leave the process unsealed;
.eeidbackups are passphrase-encrypted. - Optional secure overwrite ("shred") of originals after encryption.
- Note: opened legacy 1.x items have no authentication tag (the old format predates it), so a wrong password or corruption can't be cryptographically distinguished.