Picocrypt-NG2.18

Encrypt a single file, a group of files, or an entire folder locally on Android with Picocrypt-NG. It uses XChaCha20 for encryption and Argon2id to derive the key from a password, with optional keyfiles and a setting that requires them in a fixed order. Paranoid mode adds a cipher cascade and more difficult key derivation, while deniability mode makes an encrypted volume appear to contain random data.

Optional compression and comments can be stored with the volume. Each volume is authenticated so tampering or corruption can be detected during decryption, and Reed-Solomon error correction can recover volumes affected by limited corruption. A verify-before-write option checks integrity before data is written, while long-running operations can continue in a foreground service after the app moves to the background.

The app uses no accounts or cloud storage, includes no telemetry, and does not request Android’s INTERNET permission. Its volumes work with the desktop application on Windows, macOS, and Linux; multi-file or compressed volumes contain a ZIP file that Android saves without extracting. Picocrypt-NG is a community-maintained continuation of Picocrypt for Android 7.0 and later, and version 2.18 prepares release builds for F-Droid source and reproducible-build verification while updating its Go image dependency with TIFF decoder security fixes.