v2.2.2 continues the 2.2.x series and is recommended for all users. Upgrading from 2.2.1 is a drop-in replacement: existing key databases and settings are migrated automatically.

Highlights

Profiles. Maintain several independent setups, each with its own key databases, settings, and secure key, and switch between them from the new Profile menu. Portable profile packages (.gfp). Export an entire profile into a single passphrase-encrypted file and open it anywhere with a double-click. It runs as a temporary profile that leaves nothing behind and asks on close whether to save your changes back into the package. Instant Messaging Steganography. Encrypt and sign a message into a single Base58 word that survives being pasted into any chat app. Tokens carry no visible marker: whitened with a shared password book, they look like random text to anyone who does not have the same book phrase. The book phrase itself is now stored encrypted and can be generated and fingerprinted from settings. Key categories and a better key list. Coloured, reorderable category tabs replace the old favourites list. The key list also gains Status and Expire Date columns with a configurable expiry warning, plus search and sorting, and it remembers column widths and checked keys across restarts. More control over keys. Change the passphrase of a single subkey, pin which encryption subkey is used for a recipient, export keys to a location of your choice, start a keyserver search from the selected key, and see at a glance whether a key is v4, v5, or v6. Move a key to a smart card, powered by a rebuilt smart card controller and a dedicated card picker. A refreshed interface. Settings are now a searchable sidebar with new rPGP and Advanced pages, and with room for pages provided by modules. The file browser gains a breadcrumb path bar and OpenPGP badges, the module controller has been redesigned, appearance changes apply instantly, and the setup wizard can switch languages on the spot.

Security

Application key protection. Choose between no protection, the system keychain, or a PIN, backed by the macOS Keychain, the Windows Credential Manager, or libsecret. A Change PIN action is included, along with a reset path in case you forget it. rPGP: forged self-signatures are rejected. Revocations, expiry dates, and key capabilities are only honoured when their self-signature verifies, so a forged revocation can no longer be attached to a key. rPGP: weak and hostile inputs are refused. MD5, SHA-1, and RIPEMD-160 are never accepted as valid, cleartext signing is pinned to SHA-512, unauthenticated SED packets are rejected before decryption, and compression bombs are bounded. rPGP: weak key generation removed. RSA below 2048 bits and DSA are no longer offered, as required by RFC 9580. Existing keys keep working, and GnuPG is unaffected. Archive extraction hardened against path traversal, symlinks, oversized contents, and setuid bits. User ID validation is also stricter.

Engines

rPGP: key expiration management, plus interoperability fixes for v6 messages, expiry handling, revoked primary keys, and signer attribution. All of this is verified against sq and GnuPG using an RFC 9580 test corpus that now ships with the test suite. GnuPG: connections recover properly. Failed connection attempts back off instead of re-probing on every operation, overly long home paths produce a clear error instead of failing opaquely, and a missing gpgconf falls back to rPGP rather than refusing to start. GnuPG: maintenance actions in settings let you clear the password cache, reload the configuration, and restart gpg-agent, with real error messages replacing generic failures and correct smart card serial validation.

[!IMPORTANT] AppImage users: check which file you download. The portable build is now a separate download: pick the AppImage with portable in its name, or any other one for the normal version. The ENV.ini file that used to enable portable mode no longer has any effect, so if you relied on it, download the portable AppImage from now on. The same split applies to the Windows downloads.

Full Changelog: https://github.com/saturneric/GpgFrontend/compare/v2.2.1...v2.2.2