ZenFile

• ✨ New Features The vault now offers "Auto-encrypt new files" (enable it in vault settings): once on, photos and videos appearing in an in-place encrypted directory (such as the camera folder) are encrypted automatically - no more tapping "Encrypt new files" by hand. Even if the camera recreates a plain-text folder with the same name, it is merged into the encrypted directory and the browser refreshes on its own (forum feedback) Storage analysis gains "Junk cleanup": scan and clean app caches, legacy cache directories and temp files in one tap (update packages younger than 24 hours are kept so the installer can still read them) "Pin / Unpin" added to the three-dot menus of file and category pages Secure share now covers ZIP archives and PDF documents: metadata is stripped before a temporary copy is shared Web sharing gains an optional access password (site-wide Basic Auth); when a public tunnel is active, authentication is enforced and an 8-character password is generated automatically if none was set The FTP server now supports username/password authentication (anonymous mode remains available); SFTP records the server host key fingerprint on first connection (TOFU) and rejects mismatches afterwards, preventing man-in-the-middle attacks
• 🎨 UI & Interaction When an encrypted directory and a recreated plain-text directory with the same name coexist, both entries now work: the encrypted one shows encrypted content, the plain one shows new files - they no longer hide each other While such a conflict exists, breadcrumbs in the local browser show the decrypted plain name while still navigating to the real location The four key-space parameters of a vault profile (directory/file name encryption, etc.) are locked after creation with an amber notice, preventing accidental changes that would make existing ciphertext undecryptable The "Storage" card caption on the Categories page now reads "Clean" to match the new junk cleanup; encrypt/decrypt icons unified to the Broken style
• 🐛 Bug Fixes Fixed SMB sessions dying silently after switching away from the app ("directory no longer valid, must reopen") (forum feedback): the dead session is now detected reliably and rebuilt transparently when you return or on the next operation Fixed the vault in-place encryption list treating ordinary folders as encrypted directories under certain configurations Fixed the browser not refreshing automatically after "Encrypt new files" finished merging a directory Fixed the FTP server settings allowing the password to be wiped when only the username was changed
• 🛠️ Security & Maintenance Remote connection passwords, SSH key passphrases and cloud-drive tokens moved into the system secure storage: legacy data migrates automatically and new writes never contain plain credentials The unlock PIN hash was upgraded from single-round SHA-256 to scrypt: existing records upgrade transparently on the first successful verification, no re-setup needed Android cloud backup of app data is now disabled; settings backup files no longer contain the PIN hash, FTP password, share password, vault master password or other sensitive items Path traversal in Web sharing and the FTP server is blocked (../ escape), as is FTP active-mode port bounce; FTPS certificate verification is strict by default Remote image thumbnails are decoded on a background thread - 10~30 MB images no longer freeze the UI; the thumbnail cache is now capped (400 entries / 64 MB) instead of growing forever Encrypted-file overwrite switched to block-level read-modify-write, visibly speeding up partial rewrites of large files; fonts are bundled locally so the first launch no longer fetches them online

Write a review