MegaGlass 0.2.7

Release for Android 15 and later (arm64-v8a).

Update: Install this APK over 0.2.6. Your login, settings and offline files stay.

Changed

• Forms (Change password, Change e-mail, 2FA setup) move above the keyboard, so the button and the error text stay visible.
• Share folder accepts a complete e-mail that you type, without a tap on the suggestion first.
• "Move here" is not available in the folder that the items are already in.
• A paused transfer queue shows "Transfers paused" in the notification.
• "New text file" and a tap on an offline copy that is not verified show a message.
• "Save to downloads" on the Offline screen shows only for verified copies.
• Video pauses when headphones disconnect.
• Status icons of finished transfers and taken-down files have TalkBack text.
• The photo timeline, search, the PDF viewer, the text viewer and the Me tab do less work on the main thread (estimate: smoother scrolling during camera uploads).

Fixed

• A temporary account block (e-mail or SMS verification) showed as a permanent block with only Logout. Now the app shows Retry. Other states no longer hide a block.
• Camera uploads cancelled queued files on a short network loss or other stops that are not your setting. The status could also stay at "Scanning" and disable "Upload now".
• A double tap on Retry in Transfers uploaded the file two times.
• A failed "Save to downloads" on the Offline screen left a partial file.
• The image viewer kept showing a file after you moved, renamed or deleted it from its menu.
• Audio errors were not shown. Now the error and a Retry button show.
• PDF Retry after a failed open showed a loading indicator that did not stop.
• The Versions screen showed Restore and Delete on read-only shared folders.
• A pull-to-refresh failure in Device Centre was not shown.
• The "Include videos" toggle could open the "Turn on camera uploads" dialog.
• The current-passcode dialog showed a text keyboard. Passcode setup had too much space at the top and bottom.

Privacy and security

• The app chooser for a public-link download no longer opens over the app lock.
• After a failed wipe, the passcode pad no longer accepts codes, so the 10-try limit stays.
• Saving the recovery key and opening the authenticator no longer lock the app in the middle of the flow.
• Password, 2FA and passcode fields turn off keyboard learning.
• Copied links and link keys clear from the clipboard after 60 s, as the recovery key does.
• The app hides overlay windows of other apps, and other apps cannot join its task.
• The MEGA SDK no longer sends its analytics tag with new files and folders. libmega.so is built again with this patch.
• A text edit that was not saved does not leave a plain-text copy in the cache after the next start.
• Storage formats, settings, keys and encryption do not change.

Verify the APK

File	Description
MegaGlass-0.2.7.apk	Signed release APK, arm64-v8a

• SHA-256: 6b53abeae53ad83b779989f50a1f8062d649e11aae026316d6433a2a0c5cab5b
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

These changes were tested with unit tests, lint, the release build and a start on an emulator. The changes in the logged-in screens, the account block, camera uploads and playback were not tested by hand on a device.

MegaGlass 0.2.6

Release for Android 15 and later (arm64-v8a).

Update: Install this APK over 0.2.5. Your login, settings and offline files stay.

Changed

• "Remove link" on an album asks you to confirm first, as on files and folders. After the link is removed, "Link removed" shows.
• In the Contacts search, system Back closes the search first. Before, it closed the Contacts screen.
• The X button in the Contacts search has the TalkBack label "Clear", as in Search. The button clears the text and does not close the search.
• Text from the Android libraries is in English only, as the rest of the app. Before, some library text and TalkBack labels used the language of the device.
• The release APK is about 555 KB smaller (32.2 MB, not 32.8 MB). The library translations, one unused native library and unused code are removed.
• The contact list does less work when it loads.
• Build: the Kotlin serialization compiler plugin and the material3-adaptive-layout library are removed. The app did not use them.

Fixed

• While a transfer ran, the transfer indicator at the bottom left covered the left buttons of the selection toolbar. A tap on Download, Get link or Move opened Transfers. Now the transfer indicator hides while a selection toolbar shows.
• The keyboard opened again each time you went back to Search or to the Contacts search from a result. Now the keyboard opens only for a new search.
• A paused, ended or failed video kept the screen on until you closed the player. Now the screen stays on only while the video plays or loads.
• A change of font size, bold text or app language sent the app back to the start tab. On Android 15 and 16, a hardware keyboard did the same. On Android 16 and later, a wallpaper colour change with dynamic colour did the same. The text editor lost unsaved edits, an open folder link closed, a video stopped, and a shared file that waited for the unlock was lost. Now the app stays on the same screen.

Privacy and security

• libmega.so is now the only native library in the APK. The unused DataStore native library (libdatastore_shared_counter.so) is removed.
• Storage formats, settings, keys and encryption do not change.

Verify the APK

File	Description
MegaGlass-0.2.6.apk	Signed release APK, arm64-v8a

• SHA-256: 0417d6071f859263185c2eac5245f424a26d73756c81e1a3d83e8952f8be742f
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

On Android, these changes were tested with unit tests, lint and the release build, and by hand on a device with a live account. A wallpaper colour change, a hardware keyboard and the TalkBack label of the X button were not tested by hand.

MegaGlass 0.2.5

Alpha release for Android 15 and later (arm64-v8a).

Update: Install this APK over 0.2.4. Your login, settings and offline files stay.

Changed

• A contact request message shows on 4 lines or less.
• The contact list loads again only while the screen shows it.
• The README now tells that copies of files that you open stay in the app cache, and that the app lock does not encrypt data.

Fixed

• An album that had the same photo more than one time could stop the app. Now the photo shows one time, and "Remove from album" removes all its copies from the album.
• The PDF page scan stops when the screen closes. A document that opens after the screen closed is closed.

Privacy and security

• Folder-link previews (PDF, text and images) now download through the transfer engine, which checks the file MAC. The separate stream download, which had no check, is removed.
• Images and viewer copies of folder-link files go in their own cache folders. MegaGlass deletes them when the folder link closes.
• The image viewer gives a clean local name to a file that it downloads from a folder link.
• Contact names, album names, sync stall paths, viewer titles and the save message show clean display names.
• A MEGA link that comes from another app opens only after you unlock the app.

Verify the APK

File	Description
MegaGlass-0.2.5.apk	Signed release APK, arm64-v8a

• SHA-256: 4903603b69cd7ddcb1b25ca73ce6b7a4242ef72fead1835e32cf40e48eafb7a8
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

On Android, these changes were tested with unit tests, build and lint only, not on a device with a live account.

MegaGlass 0.2.4

Alpha release for Android 15 and later (arm64-v8a).

Update: Install this APK over 0.2.3. Your login, settings and offline files stay. After the update, the MEGA SDK gets a new random device ID one time. In Device Centre, the syncs and camera uploads (backups) of this session can show under a new device.

Changed

• A file that is available offline now opens from its offline copy in Drive, Photos and Search. It also opens without a network.
• When the session cannot resume without a network, the loading screen (after 5 s) and the error screen show "Open offline files".
• When you edit and save an offline text file, the new version stays offline. The old copy stays until the new copy is complete. The Offline list marks a copy as old when its file is deleted or has a newer version.
• The app lock does not show again when you come back from a file picker, the camera, a share sheet or "Open with" that MegaGlass opened. This applies to one return in 2 minutes. An exit to Home or Recents still locks the app.
• The app asks for the notification permission at the first transfer or when you turn on camera uploads, not at each start. When notifications are off, Transfer settings show "Notifications are off". This row opens the system notification settings.
• "Move to rubbish bin" in an incoming share and "Remove link" ask you to confirm first. Your own items still go to the rubbish bin at once, with Undo.
• The passcode setup screen and the wrong passcode message now tell you the full rule: after 10 wrong passcodes, MegaGlass logs out and deletes offline files and photos that did not upload.
• Error messages are now clear text. They do not show raw codes such as "Error -17", and they are never empty.
• TalkBack reads the selected items in grid view and in Photos, the names of the colour labels, the number of passcode digits, each wrong passcode, and the file name of a photo without a thumbnail. A TalkBack action shows or hides the video controls.
• The video controls stay on the screen for the time of the system setting "Time to take action", not for a fixed 3.5 s.
• The periodic camera uploads check runs every 6 hours, and not when the battery is low. New photos and "Upload now" still start an upload at once.
• Thumbnails, the photo timeline, folder screens and the transfer list do less work. A thumbnail that scrolls out of view before it loads does not download again. Hidden folder screens do not reload during a large sync.
• The native MEGA library is about 25 MB, not 33 MB (estimate). The release APK is about 33 MB (estimate).
• Build and tests: Gradle 9.8.2, kotlinx-serialization 1.12.0, DataStore 1.3.0 and material3 1.5.0-beta02. The APK does not contain library version files, licence copies and Kotlin metadata files. New unit tests and lint fixes.

Fixed

• When Photos, Search, Shared, Home recents or an album did not load, the screen showed "No photos" or "No results". Now it shows an error with Retry.
• A failed load of a system album stopped the app.
• Search showed fewer results than were available, because it removed the rubbish bin matches after it read the first 500 nodes. Now it shows up to 500 results outside the rubbish bin, and a note when the list is at this limit.
• The new folder dialog showed the wrong message when a folder with the same name was already there.
• The status bar and navigation bar icons were hard to read when the app theme was not the same as the system theme.

Privacy and security

• The MEGA SDK does not send a hash of the Android ID as the device ID. MegaGlass gives the SDK a random ID for each login, and deletes it at logout. MEGA cannot use the device ID to link two accounts on the same phone.
• The MEGA SDK sends no diagnostic events or error reports to MEGA. Some of these events contained file fingerprints and MACs. The SDK also does not add the journey ID from the server to the API requests.
• The user agent does not contain the kernel release or the CPU architecture. It is the same on every device.
• The local stream server for video and audio sends no CORS header. A web page in a browser on the phone cannot read a stream.
• The native library uses curl with HTTP(S) and WebSockets only. The other protocol handlers (for example FTP, SMTP and TELNET) are not in the build.
• All native code has BTI and PAC branch protection. Android enforces BTI for the native library on devices that support it.
• The native library exports only its JNI functions, not about 40,000 symbols (estimate). The linker removes more unused code.
• A copied recovery key or 2FA secret is cleared from the clipboard after 60 s, also when the app process stops before then.
• The keyboard does not learn the key or the password of a public link.
• A new session key uses StrongBox when the phone has it, else the TEE. An existing key stays valid.
• When a public folder link closes, MegaGlass deletes the file list of that link from app storage.
• Decrypted copies for other apps and for link downloads are trimmed during the session, not only at app start.
• Release builds do not write stack traces, console prints or verbose logs to logcat. Before, the SDK image code could write photo and video paths there.
• The README now tells what all-files access gives the app, that the SDK does not check the certificates of the storage servers, and that another app that finds the stream port can read the file that plays.
• Build: the native SDK builds only from a clean tree with the patches, and Gradle checks the versions of all 12 native components. The release signing reads the Keychain passwords only for a signed release.

Verify the APK

File	Description
MegaGlass-0.2.4.apk	Signed release APK, arm64-v8a

• SHA-256: 15a83adfa13dd1619b0c713f9233f8e4252cc9e9242c02bb1e85df93d4f74324
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

On Android, these changes were tested with unit tests, build and lint only, not on a device with a live account.

MegaGlass 0.2.3

Alpha release for Android 15 and later (arm64-v8a).

Privacy and security

• Memory tagging (MTE) is on. The MEGA SDK reads network data in native code. On a phone with MTE (GrapheneOS, or a Pixel 8 or later with the developer option or Advanced Protection), a bad memory access stops the app at once.
• MegaGlass no longer asks for a downloadable emoji font. On a phone with Google Play Services, that request went to the Play Services font provider.
• App data is also excluded from a transfer to iOS, as from cloud backup and device-to-device transfer.

Verify the APK

• SHA-256: 1372c3f7b061fb7b66fa45c2ea76a7757199f0d0bf53b4fe7ce97f14a93e8569
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

On Android, these changes were tested with unit tests, build and lint only, not on a device with a live account.

MegaGlass 0.2.2

Alpha release for Android 15 and later (arm64-v8a).

Fixes

• Videos start again sooner after a jump. After a jump, the MEGA SDK downloaded about 2 s of video before the new position first, and on a slow network the video waited for it. Now the download starts at the new position. This is the same SDK fix as in MegaGlass for macOS 0.2.2, where the first data after a jump came after 0–7 s instead of 8–37 s in a test.

Verify the APK

• SHA-256: 83ea58c73c6b0d8f9b59b5c0da5b4e91c84fe64699ab3f1f3b86823e140dbdc7
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

On Android, the fix was tested with unit tests, build and lint only, not on a device with a live account.

MegaGlass 0.2.1

Alpha release for Android 15 and later (arm64-v8a).

New

• Each folder keeps its own view (list or grid), as it already kept its own sort. The choice stays after you close the app and is removed when you log out. A folder with no choice of its own shows the default view, which the list/grid button sets on the other screens (Shared items, categories, search).

Checked

• Sort by size and by date (Newest, Oldest) give the correct order in folders, search, Shared items and links. No change was necessary.

Verify the APK

• SHA-256: 4dd5c64ac8b133bd44e7d517483d55e80516c7daf8c20124115c0bfb06ceb68e
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

The new behavior was tested with unit tests, build and lint only, not on a device with a live account.

MegaGlass 0.2.0

Alpha release for Android 15 and later (arm64-v8a). This release fixes the problems that a full security and code review found before the first users.

Security

• Other apps can no longer connect to the media session, read the play queue or stream your files.
• MediaInfoLib 26.10 fixes four heap overflows in the media parser that runs on uploads and downloads (CVE-2026-28764, CVE-2026-25104, CVE-2026-25713, CVE-2026-22554).
• Files shared from other apps are read only through the access that the other app gave.
• Biometric unlock is bound to a Keystore key, so a newly enrolled fingerprint or face does not unlock the app. Changing the passcode, the lock timeout or biometric unlock asks for the current passcode.
• Camera uploads no longer include the GPS location.
• File names with bidi or control characters are shown and saved without these characters.

Data safety

• Syncs pause when All files access is removed, so the cloud copies are not deleted.
• Albums open correctly. Before, about half of the albums opened empty.
• Restore from the Rubbish bin does not overwrite a file with the same name.
• Actions on many items finish when you leave the screen.
• The text editor keeps your edits until the save is done.
• Captured photos are kept when the upload does not start.

Other fixes

• Transfers continue after short network drops. Cancelling one download cancels only that file.
• Camera uploads respect Wi-Fi only and charging.
• A crafted PDF no longer crashes the viewer.
• Many smaller fixes.

License

MegaGlass is now GPL-3.0. The third-party notices are in About.

Verify the APK

• SHA-256: f7a0c258516bad89358c61c309ffeca073946dad1e282e9b4d10899b193bba1b
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

Workflows that need a MEGA account (login, transfers, offline, camera uploads) have not been tested end to end with a live account yet.

MegaGlass 0.1.3

Alpha release for Android 15 and later (arm64-v8a).

Changes

• New app icon: a plain white cloud on the red background, without the lock. The launcher, themed icon, splash screen, login screen and About screen show the new icon.

Verify the APK

• SHA-256: a3eac28bdbd5b6417a0e38c97e6e6d160363191a1815bb5c82b706b1c6b30fa9
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

Workflows that need a MEGA account (login, transfers, offline, camera uploads) have not been tested end to end with a live account yet.

MegaGlass 0.1.2

Alpha release for Android 15 and later (arm64-v8a).

Fixes

• Text editor: a second save in the same session works. The editor shows the save state and tells you when uploads are paused.
• Offline: downloads that were interrupted by an app restart now finish or start again. Old copies no longer stay on the device after a re-download or a removal.
• Login: large accounts can load the file tree for longer than 90 seconds. A timed-out login no longer leaves a request running in the background.
• Camera uploads: one unreadable or deleted file no longer stops all uploads. Photos that you delete from the cloud are not uploaded again.
• Settings: a wrong passcode when you turn off the app lock no longer counts toward the 10-attempt wipe.
• Photos from the camera button upload with a clean name (IMG_<date>_<time>.jpg).
• Thumbnails refresh correctly after many changes at the same time.
• Smoother swiping in the image viewer.
• Faster copy and move to the Rubbish bin for large selections.

Verify the APK

• SHA-256: 68758aeefe2d5fa91bddad02f123d418dd2b7591cce5ca6282574c94edc84dcc
• Signing certificate SHA-256: 84c7ed6935e18d6e6aebc6e3c490e3aa5468974ee856baf1df979bda3c7b5241

Workflows that need a MEGA account (login, transfers, offline, camera uploads) have not been tested end to end with a live account yet.