Cryptad v2 release notes
Cryptad v2 focuses on safer content handling, a smoother first-run experience, and a more reliable launcher and core updater. It also removes the legacy plugin runtime and changes the encrypted AEAD stream format used by some persistent data.
What's new
- Harden the built-in web UI and content filters for HTML, CSS, redirects, and common media paths including JPEG, GIF, FLAC, Vorbis, Theora, MP3, and M3U handling.
- Rework first-time setup and startup flow so the wizard redirects cleanly, password changes behave correctly during setup, and first-run startup logs are less noisy.
- Improve connectivity feedback with better public IP detection, clearer port-forward alerts, fixed darknet handshake regressions, and cleaner diagnostics reporting.
- Make bookmarks and localization behavior more reliable across restarts.
Upgrade and compatibility
- Breaking change: remove the legacy in-process plugin runtime. Older plugins, plugin web UIs, and plugin automation paths no longer run in Cryptad v2.
- Breaking change: switch AEAD streams to AES-GCM. Older OCB-encrypted persistent request data and plugin store files are not migrated automatically, so some queued or in-progress work from older versions may not resume after upgrade.
- Recommended: back up your Cryptad data directory before upgrading from
v1.
Launcher and installers
- Improve macOS packaging and relocation handling so moving the app bundle is less likely to break metadata or code signing.
- Fix launcher theme detection and live theme updates across Flatpak/XDG portals, GNOME, KDE, macOS, and Windows.
- Keep launcher window sizing consistent and improve packaged Windows launcher troubleshooting output.
Core updater
- Make package-based core updates more reliable by preserving custom update channels and revocation settings, remembering the last known-good fetched edition per channel, and resetting stale state when channels change.
- Stop background auto-downloads for invalid or older build numbers and fix updater status deadlock paths.
- Remove the remaining legacy jar update-over-mandatory code paths. Package-based core updates remain the supported release path.
Stability and security
- Fix persistent storage edge cases including Windows file moves, restored random-access-file cleanup, no-close checksum handling, and resume or cancel paths for persisted requests.
- Reduce upload and insert stalls, and remove an internal command API deadlock that could block request handling.
- Expand automated tests and static-analysis coverage across the release, which caught and fixed a large number of correctness issues before tagging.
SHA256 Checksums
deedb84031984b5ff78b717c32d93c838e8f8c29a286940e1b679d78d7db32b6 ./CryptaInstaller-v2-amd64.exe
1ed03fd9733109466d33b7436bc9df255f875fead7e748dc37cf99d851ba92bb ./CryptaInstaller-v2-arm64.exe
b66866cbcd27ca82e1889c92120d163adeb921003d8b482da6c81085c1124d85 ./cryptad-v2-amd64.deb
56ca1cd8b2c238b4fea9bf3824f6ffd2b3c6dbc526aa9af55bdc832c35bb93ae ./cryptad-v2-amd64.flatpak
18cb7e89682f799c70615b855298fb8b0ad7e14b0a46fc59ddb20601733ab6f7 ./cryptad-v2-amd64.rpm
a9775abb53aa70644ea17359b7946a065e0d5e797177b2525d4bb1a5b35d7038 ./cryptad-v2-amd64.snap
9a8bed384d580230b492fff41f4f87055dfbbc84981e89f4853e193cef977087 ./cryptad-v2-arm64.deb
0d93e4be38185971e8c5b028174d144afa01da63eaa937ff0289d4c51cc477a3 ./cryptad-v2-arm64.dmg
54b13217b700a22591e5cba135a595ef3d00952797b39448d946631b38e4d6d8 ./cryptad-v2-arm64.flatpak
1ceca567cb0adf94769790ec31c02dd791cdfe09a2c029a7ed6a5998191e4d4d ./cryptad-v2-arm64.rpm
f6c40bb66b9132b4f34b9ae05dce40e42aa69ef4569a32dfcbe5ee7fd413a6e2 ./cryptad-v2-arm64.snap
08f6129e2cb0c56e584679209373d76c792ff7a8abcf05d48b1b0c6909d83ac5 ./cryptad.jar