Picocrypt (2024)

Since version 1.32, Picocrypt has supported —a feature that allows you to create a hidden volume that is indistinguishable from random data. Under duress, you can reveal a secondary password that unlocks a different set of files, while the true sensitive data remains hidden and undetectable. The deniable volume generates a new Argon2 salt and XChaCha20 nonce that appear completely random, leaving no identifiable header data that could give away the presence of a hidden volume.

Follow the prompts to save your new keyfile to a secure location. Creating an Encrypted File picocrypt

Most encryption tools stop at AES-256. While AES is secure (it is a NSA-approved standard for top-secret information), Picocrypt takes a "belt and suspenders" approach. Since version 1

The CLI supports all the same features as the GUI, including Paranoid Mode, error correction, and keyfiles. For scripting sensitive environments, the -P flag allows you to read the password from stdin, avoiding password exposure in command history. Follow the prompts to save your new keyfile

Unlike complex suites, Picocrypt focuses on doing one thing exceptionally well: encrypting individual files and folders with zero bloat. Its name—"Pico"—reflects its tiny footprint, yet it packs industry-leading security under the hood.

PicoCrypt uses a combination of substitution and transposition ciphers to encrypt messages. The scheme consists of a set of printable tables and grids that are used to transform the plaintext message into ciphertext.

Users can require one or more files to be present for decryption, providing a form of two-factor authentication.