Is Picocrypt-NG safe?

Picocrypt-NG encrypts files locally — a community-maintained continuation of Picocrypt. No accounts, no cloud, no telemetry, no network access (the app does not request the INTERNET permission). XChaCha20 for encryption, with the key derived from your password by Argon2id. Every volume is authenticated, so tampering or corruption is detected on decryption. Features: - Encrypt a single file, multi…

Developer: Picocrypt-NG
Category: File Encryption & Vault
Earliest archived version: 01 Jul 2026
License: GPL-3.0-only (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

01 Jul 2026

2.18

Android release builds are prepared for F-Droid source and reproducible-build verification. - Updated Go image dependency with TIFF decoder security fixes.

Full notes →

03 / Package identity

Technical fingerprint

Application IDio.github.picocrypt_ng.picocrypt_ng

Latest APK SHA-25621e805e4e3a5f7138ce2ba9015b615910244adf540118cd51b91a386628b85b5

Signing certificateE2:F2:A9:71:23:1A:A0:B8:68:82:C6:3B:87:B6:89:C7:16:32:C6:D5:51:68:B1:CE:85:69:52:D0:7F:61:72:B7

MIN ANDROID24TARGET36ARCHITECTUREx86_64

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

2.1801 Jul 202624+x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions4 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.POST_NOTIFICATIONS io.github.picocrypt_ng.picocrypt_ng.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗