Cyphra Android 0.1.1

Cyphra Android 0.1.1 — Public edition. Android 10 or later; signed universal ARM64/ARMv7/x86-64 APK. Desktop versions remain separate.

• Redesigned dark native Shields sheet with live request counts, a readable ads/trackers/telemetry breakdown, separate Gecko events and selected DNS details.
• Restore the ordinary tab you last selected, including native Home tabs. Private tabs stay out of saved sessions. Backgrounding the app during startup no longer erases saved tabs.
• Downloads honor safe server filenames, UTF-8 filename metadata and file types. A save succeeds only after Android publishes the completed file.
• Overlapping Android permission requests cannot replace another website's callback; results must match actual OS grants.
• Android 12 splash resources use versioned themes for Android 10/11 compatibility.

The public APK starts in Personal with System DNS. Both profiles offer DNS choices in Settings. Public GitHub update checks are anonymous.

GeckoView engine, Brave-only search, isolated Work/Personal profiles, private tabs, local tools, strict encrypted browser DNS choices, manual encrypted bookmark sync and verified GitHub APK updates remain included. The engine and filters remain pinned. Cyphra initializes no analytics SDK; upstream reporting code remains compiled in and is disabled by verified startup preferences and known-endpoint blocking.

Install this newer APK over the same edition to keep profiles and settings. Do not uninstall when upgrading. Updates verify the pinned release signature, full size/SHA-256, package/version and original Android signing certificate; Android asks before installation.

Tested on the Android 16/API 36 x86-64 AOSP emulator, with Java tests and Android lint. Physical phones and older supported Android versions still need device qualification. Passkeys/WebAuthn and DRM remain disabled; desktop inspector and offline OneCRL maintenance are not ported. Browser DNS applies to Gecko; native sync/GitHub requests use Android's resolver. See validation.json for measured results. Matching source, notices and checksums accompany the APK.

Cyphra Android 0.1.0

Cyphra Android 0.1.0 is the first native mobile release. Android 10 or later; ARM64, ARMv7 and x86-64 in a universal signed APK. Desktop releases remain separate.

Native GeckoView browsing, Work/Personal profiles, private tabs, actual local Shields counters, Brave-only search, browser DNS choices, bookmarks, downloads, website permissions and local tools. Manual encrypted v2 bookmark sync interoperates with the desktop server. GitHub updates verify the pinned release signature, full APK size/hash, package/version and installed signing certificate; Android asks before installation.

The public edition starts in Personal with System DNS and checks updates anonymously. Both offer DNS choices and independent profile settings. No host network settings are changed.

Initial limits: passkeys/WebAuthn and DRM are disabled; desktop developer inspector and offline OneCRL maintenance are not ported. Gecko contains upstream reporting code; Cyphra disables reporting with a verified startup policy and denies known telemetry requests. Native GitHub/sync HTTPS calls use Android's resolver. There is no Play Store listing.

Tested on an Android 16/API 36 x86-64 AOSP emulator, plus Java crypto/navigation tests and Android lint. Physical ARM devices and older supported Android releases still need device qualification. See validation.json for measured scope. Source archives, notices, pinned engine/source references and checksums accompany the APK. Upgrades with the same edition signing key preserve data; uninstalling deletes it.

Cyphra 0.7.1

Cyphra 0.7.1

This patch fixes the new-tab search magnifiers and security-briefing refresh icon. Native rendering checks now verify their SVG geometry and the existing logo; trusted clicks and private-window restrictions are tested.

The first independent public Cyphra edition is available for Windows and Linux, with Gecko and open-source privacy controls.

Personal starts with balanced local filtering, native cookie partitioning and WebGL compatibility. Work opens a separate profile with Strict Shields, stronger fingerprint resistance and WebGL disabled. Cookies, logins, bookmarks, history and settings stay separate; both profiles survive application updates.

A quieter monochrome interface keeps the original shield logo, a slim rail, Focus view, tab search and a clearer Shields panel. Its counters reflect actual blocked requests. Tools includes native inspection, Network, Console, Page source, Page information, screenshots and local JSON/Base64/URL/SHA-256 utilities. Brave Search is the sole provider. The script-free home page offers local bookmarks and manually refreshed security headlines.

Public Cyphra initially follows System DNS. Settings lets you choose System, Quad9, Cloudflare, Toxitech or custom HTTPS. Encrypted selections use strict DNS-over-HTTPS without silent plaintext fallback; diagnostics query the actual selected resolver. Only the browser's profile preferences change.

Optional manual sync uses a server you choose, encrypts bookmarks and selected preferences before upload, and binds new vaults to the mode and edition. Passwords, cookies, history, tabs, DNS choices and update credentials are excluded. No team account or preset sync service is required.

The release uses verified Gecko 157.0.1, local filters and a signed offline Mozilla certificate-revocation snapshot dated 9 October. Browser telemetry and upstream reporting services are disabled. Native tool selection, System DNS diagnostics and cosmetic navigation cleanup are repaired.

Install or update

Windows x64: run Cyphra-Public-0.7.1-win-x64.exe, or extract the complete ZIP and run Cyphra.exe. Later updates preserve both profiles under %LOCALAPPDATA%/Cyphra; close both modes before updating.

Linux x64: extract the complete tar.gz and run ./Cyphra/cyphra as your desktop account. Later offline updates use ./Cyphra/cyphra-update --archive /path/to/Cyphra-Public--linux-x64.tar.gz after both modes close. GTK/NSS libraries, Python 3.9+ and util-linux flock are required.

Settings → Updates checks public GitHub releases anonymously. Automatic checks default off; downloads and installation require an explicit action. The pinned public-edition ECDSA signature and package size/SHA-256 are verified before installation. Matching source, licenses and checksums accompany the release.

The Windows installer is unsigned. Native Linux checks and the hosted Windows Server 2022 install, mode isolation, GitHub check, reinstall and uninstall checks pass. Physical interactive Windows 10/11 presentation remains outside this qualification. See VALIDATION.md for evidence and limits. Offline certificate/filter data require maintenance; endpoint filtering cannot prevent every website tracking technique.

The exact 0.7.1 installer passes native hosted Windows qualification, including Home rendering, both isolated modes, GitHub checks and profile-preserving reinstall/uninstall. Both editions also pass actual published Linux update download, signature/hash verification, prepare-only verification and last-minute tamper refusal.

Cyphra 0.7.0

Cyphra 0.7.0

The first independent public Cyphra edition is available for Windows and Linux, with Gecko and open-source privacy controls.

Personal starts with balanced local filtering, native cookie partitioning and WebGL compatibility. Work opens a separate profile with Strict Shields, stronger fingerprint resistance and WebGL disabled. Cookies, logins, bookmarks, history and settings stay separate; both profiles survive application updates.

A quieter monochrome interface keeps the original shield logo, a slim rail, Focus view, tab search and a clearer Shields panel. Its counters reflect actual blocked requests. Tools includes native inspection, Network, Console, Page source, Page information, screenshots and local JSON/Base64/URL/SHA-256 utilities. Brave Search is the sole provider. The script-free home page offers local bookmarks and manually refreshed security headlines.

Public Cyphra initially follows System DNS. Settings lets you choose System, Quad9, Cloudflare, Toxitech or custom HTTPS. Encrypted selections use strict DNS-over-HTTPS without silent plaintext fallback; diagnostics query the actual selected resolver. Only the browser's profile preferences change.

Optional manual sync uses a server you choose, encrypts bookmarks and selected preferences before upload, and binds new vaults to the mode and edition. Passwords, cookies, history, tabs, DNS choices and update credentials are excluded. No team account or preset sync service is required.

The release uses verified Gecko 157.0.1, local filters and a signed offline Mozilla certificate-revocation snapshot dated 9 October. Browser telemetry and upstream reporting services are disabled. Native tool selection, System DNS diagnostics and cosmetic navigation cleanup are repaired.

Install or update

Windows x64: run Cyphra-Public-0.7.0-win-x64.exe, or extract the complete ZIP and run Cyphra.exe. Later updates preserve both profiles under %LOCALAPPDATA%/Cyphra; close both modes before updating.

Linux x64: extract the complete tar.gz and run ./Cyphra/cyphra as your desktop account. Later offline updates use ./Cyphra/cyphra-update --archive /path/to/Cyphra-Public--linux-x64.tar.gz after both modes close. GTK/NSS libraries, Python 3.9+ and util-linux flock are required.

Settings → Updates checks public GitHub releases anonymously. Automatic checks default off; downloads and installation require an explicit action. The pinned public-edition ECDSA signature and package size/SHA-256 are verified before installation. Matching source, licenses and checksums accompany the release.

The Windows installer is unsigned. Native Linux checks and the hosted Windows Server 2022 install, mode isolation, GitHub check, reinstall and uninstall checks pass. Physical interactive Windows 10/11 presentation remains outside this qualification. See VALIDATION.md for evidence and limits. Offline certificate/filter data require maintenance; endpoint filtering cannot prevent every website tracking technique.