VC Port 0.3.7 (stable alpha)

Stable alpha: shorter About in the apps; several-file copy; Open after Home without a dead /proc/self/fd path. Debug-signed FOSS APK plus an unsigned iOS IPA. Same app id as 0.3.6; installing the APK replaces the old copy. Not a store build. Not 1.0. Not unbreakable.

What changed

• About keeps both quotes, TrueCrypt attribution, GitHub URL, name, and email. The long author footnote stays in the README, not the app.
• Copy from device / Move from device can pick several files. Copy to device / Move to device send every selected file.
• Native open no longer uses /proc/self/fd. Payload import copies into cache first.

Install

VCPort-0.3.7.apk — FOSS flavor, no INTERNET. Allow unknown sources, then install.

VCPort-0.3.7-unsigned-preview.ipa — not Apple-signed. Sign it with your Apple ID in AltStore / SideStore, or build ports/ios in Xcode and pick your Team.

VC Port 0.3.6 (stable alpha)

Stable alpha: Open after Home no longer dies on a dead /proc/self/fd path. Debug-signed FOSS APK plus an unsigned iOS IPA. Same app id as 0.3.5; installing the APK replaces the old copy. Not a store build. Not 1.0. Not unbreakable.

What changed

• After Home or closing the app, Open copies the chosen container into app cache when the Files descriptor is gone
• That stops “Could not read the container file” from a dead /proc/self/fd path

Install

VCPort-0.3.6.apk — FOSS flavor, no INTERNET. Allow unknown sources, then install.

VCPort-0.3.6-unsigned-preview.ipa — not Apple-signed. Sign it with your Apple ID in AltStore / SideStore, or build ports/ios in Xcode and pick your Team.

VC Port 0.3.5

Phone preview: debug-signed FOSS APK plus an unsigned iOS IPA. Same app id as 0.3.4; installing the APK replaces the old copy. Not a store build. Not unbreakable.

What changed

• Wrap (.vcpw) is gone from the Android and iOS apps. Copy files in and out of a volume instead
• After a successful Open, the Volume tab clears password, PIM, and mount-option checkboxes. Tools still uses the last unlock in RAM until Dismount
• Tools no longer copies Volume PIM into New PIM
• Mounted tab uses a slim action row and a Folder menu
• CI and ports/scripts/build-phones.sh build Android and the unsigned iOS IPA in parallel

Install

VCPort-0.3.5.apk — FOSS flavor, no INTERNET. Allow unknown sources, then install.

VCPort-0.3.5-unsigned-preview.ipa — not Apple-signed. Sign it with your Apple ID in AltStore / SideStore, or build ports/ios in Xcode and pick your Team.

VC Port 0.3.4

Phone preview: debug-signed FOSS APK plus an unsigned iOS IPA. Same app id as 0.3.3; installing the APK replaces the old copy. Not a store build. Not unbreakable.

What changed

• Copy/move no longer overwrites the success line with “Reading folder…”
• Dismount clears backup-header / read-only / TrueCrypt / hidden-protect so the next open is not a wrong-password mix
• Add/Remove keyfiles unlocks with the last successful mix, then writes the new list
• Full app-interface session tests on Android emulator and iPad Simulator (basket, nested volume, save wipes secrets, reopen, multi-mount copy/move, header backup/restore, KDF, keyfiles). Tests do not tap Panic wipe.

Install

VCPort-0.3.4.apk — FOSS flavor, no INTERNET. Allow unknown sources, then install.

VCPort-0.3.4-unsigned-preview.ipa — not Apple-signed. Sign it with your Apple ID in AltStore / SideStore, or build ports/ios in Xcode and pick your Team.

VC Port 0.3.3

Phone preview: debug-signed FOSS APK. Same app id as 0.3.2; installing this replaces the old copy. Not a store build. Not unbreakable.

What changed

• After you save a new volume, password, PIM, and keyfiles are wiped. Type the password again to Open volume.
• Saving no longer overwrites the good cache copy, so Open should not fail with “Could not read the container file.”
• New Mounted tab with eight desktop-style slots. Volume / Create / Tools stay available. Select several files and Copy to volume / Move to volume between mounted containers.

Install

VCPort-0.3.3.apk — FOSS flavor, no INTERNET. Allow unknown sources, then install.

iPhone: no new IPA on this tag. Build ports/ios and sign it yourself.

VC Port 0.3.2

Summary

VC Port 0.3.2. Official VeraCrypt src/ stays at the pin; phone hunks live under ports/overlay/src/. GitHub Release is one FOSS APK. Appearance is Original and Dark mode. Several volumes can stay mounted in one session (up to 8). Fingerprint / Face ID and in-app Check for updates are not on master (experimental-biometrics).

HMAC-SHA-512 is unchanged. Not unbreakable. Master at f569b5a3.

Android APK (debug-signed preview)

VCPort-0.3.2.apk is debug-signed. Same applicationId as 0.3.1, so installing this replaces the old FOSS, GitHub, and Looks APKs. Sign production yourself with VC_PORT_RELEASE_STORE_FILE.

• No INTERNET permission
• No Looks skins in this build
• No in-app update check

iOS

No new IPA on this tag. Build ports/ios from source and sign it with your Apple ID.

License

Apache-2.0 AND TrueCrypt License 3.0. This derived work is not named VeraCrypt.

VC Port 0.3.1

Summary

VC Port 0.3.1. Recents shows a blank card (FLAG_SECURE); the app is not hidden from the task switcher. Home dismounts an open volume but keeps the Create wizard (outer and nested passwords, nested checkbox, cipher/KDF/PIM, basket, size) so Copy once can be pasted into Notes. Nested basket size is included in “at least”. ARM64 AES uses the CPU crypto extension. Header KDF / keyfile edits keep the current PIM when New PIM is left at 0.

HMAC-SHA-512 is unchanged. Not unbreakable. Master at cae333d7.

Android APKs (debug-signed previews)

These APKs are debug-signed. F-Droid (or VC_PORT_RELEASE_STORE_FILE) must sign production builds. Do not treat the SHA-256 of these files as a release hash.

• VCPort-0.3.1-fdroid-preview.apk — F-Droid flavor, no INTERNET
• VCPort-0.3.1-github-preview.apk — GitHub flavor, tap-to-check updates only
• VCPort-0.3.1-looks-preview.apk — Looks skins, no INTERNET
• VCPort-0.3.1-looks-github-preview.apk — Looks skins, tap-to-check updates

Installing Looks replaces the Desktop-only APK (same applicationId).

iOS IPA (unsigned preview)

VCPort-0.3.1-unsigned-preview.ipa is unsigned. Re-sign with your Apple ID or sideload with AltStore / SideStore. AltStore downloadURL stays empty.

License

Apache-2.0 AND TrueCrypt License 3.0. This derived work is not named VeraCrypt.

VC Port 0.3.0 mobile previews

Packages

These files are debug-signed (Android) or unsigned (iOS) previews, not F-Droid / App Store / production builds. Do not copy their hashes into android_apk_sha256.

File	What it is
VCPort-0.3.0-fdroid-debug-signed-preview.apk	F-Droid flavor (no INTERNET). Android debug keystore. ABIs: armeabi-v7a, arm64-v8a, x86, x86_64.
VCPort-0.3.0-github-debug-signed-preview.apk	GitHub flavor (tap-to-check updates). Same debug keystore.
VCPort-0.3.0-ios-unsigned-preview.ipa	iOS arm64. Not code-signed. Sign in Xcode with your Apple ID, then sideload (AltStore / SideStore). Not App Store.

App version inside the packages is 0.3.0 (versionCode / CURRENT_PROJECT_VERSION 5). Built from master at 553c7d4c (the v0.3.0 git tag is an older source snapshot and was not moved).

SHA-256

caf4b33a2b43ce139da36dede6ce1e7f1ee1156cc18bd9d5effe6acd02349550  VCPort-0.3.0-fdroid-debug-signed-preview.apk
e4b7c7f72fa91c6fa907abd0335cac8cf44408507148b68f1779aa09f6d5e344  VCPort-0.3.0-github-debug-signed-preview.apk
af563e5c5b3b8a67f2d96a36b43b91c956a42c10302037d8ecd7b77277245ccd  VCPort-0.3.0-ios-unsigned-preview.ipa

This is not unbreakable. Nation-state implants remain out of scope. Production Android must be signed by F-Droid or VC_PORT_RELEASE_STORE_FILE.

VC Port 0.2.2

Package build fix on top of 0.2.1 hardening. Not named VeraCrypt. Not unbreakable.

Packages

GitHub Actions attaches debug-signed preview APKs when the VC Port workflow finishes:

• app-fdroid-release.apk — no INTERNET (F-Droid-shaped)
• app-github-release.apk — tap-to-check updates only

0.2.0 / 0.2.1 tags exist but their APK jobs failed (STRING.H / Argon2 AVX2). This tag is the one to install.

0.2.1 (included)

Panic wipe, session lock, no SAF export, StrongBox, wrap Argon2id 32 MiB. See ports/THREAT-MODEL.md.

License

Portions of this product are based in part on TrueCrypt, freely available at http://www.truecrypt.org/

VC Port 0.2.1

High-threat hardening release. This derived work is not named VeraCrypt. Nothing here is unbreakable.

What’s in 0.2.1

• Always-on screenshot block, recents hidden, no cloud or device-to-device backup
• Panic wipe and background session lock (passwords and plaintext cache)
• Removed exported DocumentsProvider; FileProvider no longer exposes all of cache
• System TLS CAs only (no user-installed CAs); F-Droid flavor still has no INTERNET
• StrongBox when the hardware has it; compelled-biometrics warning
• Wrap files: Argon2id 32 MiB, mode 0600, keys locked out of swap
• Threat model: ports/THREAT-MODEL.md

Packages

GitHub Actions attaches debug-signed preview APKs to this release when the VC Port workflow finishes. Those are for testing. F-Droid (or your own keystore) must sign production builds.

./gradlew :app:assembleFdroidRelease
./gradlew :app:assembleGithubRelease

License

Portions of this product are based in part on TrueCrypt, freely available at http://www.truecrypt.org/

The git repo is still private. TrueCrypt 3.0 requires public source before you distribute binaries widely.