Septima 0.5.0

Batch encryption with a portable passwords file — encrypt a pile of things without inventing a password per item or reusing one across all of them.

Added

• Unique password per archive. In batch mode ("create a separate archive for each item"), every archive can get its own random 64-character password. The set is recorded in a passwords file you save wherever you keep secrets.
• The passwords file is just a file — readable JSON with one entry per archive: the archive name, what it was made from, the password, its SHA-256, when it was written, and the cipher in plain words ("7z, AES-256, encrypted headers"). Keep it in KeePassXC, Bitwarden, pass, a vault, or a drawer. Septima never talks to a password manager's API, so all of them work by default.
• Optional protection for that file — standard symmetric OpenPGP (gpg -c), so any gpg anywhere can open it: no keys, no keyring, no host access. You choose before the run starts, which is what keeps a protected run from ever writing plaintext to disk. Declining shows a plain-words warning instead of silently leaving secrets next to the archives.
• Crash-safe by ordering. Every password is written to disk before the first archive is created, and the file is rewritten atomically as each archive completes. An interrupted run can leave a password with no archive; it can never leave an archive with no password.
• Batch decrypt — the other half. Open a passwords file with the Open button, by dropping it on the window, or from the command line, and Septima offers to extract every archive it lists, each with its recorded password, into its own folder. A per-entry picker (with select-all, clear, and a filter once the list gets long) means you can take just the ones you want. Missing archives and empty passwords are skipped loudly, and only basenames are trusted, so a hand-edited path can't walk out of the folder.
• Drag entries out to extract — the missing half of drag and drop. Select rows in an open archive, drag them into Files or any app that accepts files, and they arrive extracted. A directory brings its whole subtree.

Fixed

• Saved presets now remember the encryption method, the checksum-file switch and the batch password choices, instead of quietly dropping them.
• In batch mode the archive name comes from each item, so the archive-name field is greyed out rather than looking like it still applies.
• Batch archives are no longer written next to files opened through the file chooser, where they would land in a portal directory instead of a folder you can find.

The design story — why there's no password-manager integration, and why the passwords are written before the first archive exists — is written up here: The passwords file is just a file.

Install

Signed repo, with automatic updates:

flatpak install --user https://superuser-miguel.github.io/septima-repo/septima.flatpakref

Or the one-off bundle below (no update path).