Reply To: Unhappy with version 2

[Gerard]

Version 1 was a simple, basic tool that did what many people wanted – not only encrypt files on one’s computer, but also the ability to “shred” files and even allow files to be sent to another person who didn’t even have AxCrypt installed on their computer. Genius! And no need to set up and activate an account or enter your email address.

AxCrypt 2 does all of this: encrypt files, “shred” files (shredding isn’t effective on modern hard drives) and you can send the files to friends and family.

AxCrypt 2 doesn’t need to be installed on the recipient’s computer as there’s a portable version available.

Axcrypt 2 doesn’t need you to make an account to encrypt files as it can be used permanently offline. If you install the software you’ll find there’s a menu option to enable this.

I updated to AxCrypt 2 because I could no longer share AxCrypt 1.7 files with friends. Gmail blocks all executable files by default, so does Outlook.

I’d all too that, as Wellington says, Windows has a feature (he didn’t mention the name: it’s called SmartScreen) which will stop you opening a .EXE file encrypted by AxCrypt 1.7 or any other software because of the inherent security dangers. Automatically extracting .EXE files have had their day and are no longer fit for purpose.

Something that Wellington could’ve added, although it may not affect him/her, is that antivirus software automatically deletes encrypted .EXE files because of the high potential for viruses.

AxCrypt 2 solves this by not using the old-fashioned .EXE format for encrypted files. Relying on their proprietary format .AXX solves this.

 

Apparently there’s a setting that can be invoked to do that. But then, what do your servers do? Why is Version 2, in its normal operating mode, connected to your servers? Either it needs internet connectivity, or it doesn’t.

You don’t need internet access. If you installed the software this would be apparent. I’m going to hazard a guess that you’re making assumptions about AxCrypt 2 without having installed it because, if you had, you’d know that the software can be used offline.

If you wanted you can type in anything that conforms to the email syntax <itsme@email.com> and you can use the software. It’s not a binary choice as you have said – it doesn’t require internet connectivity; it’s optional. It makes sharing files more convenient, it’s not a privacy invasive feature and if you don’t like the feature, you don’t have to use it – but you can still use AxCrypt 2 without that feature.

 

And the very idea of having to pay an annual fee in perpetuity bothers many people (again, myself included). Yes, I have read your justification for that business model, but I don’t find it convincing.

I don’t like the idea of paying a subscription but that’s how the software model has moved. Microsoft offer very few perpetual licenses any more because it’s not economic. People were complaining each time they offered an update and then made you pay £400-£500 for the update. A monthly subscription (as with Office 365) entitles users to free updates for the life of the subscription and use of the software.

Want a perpetual licence for encryption software? Jetico offer BestCrypt Container Encryption for 59,95 €. But every update you’ve got to pay for (I think they offer a discount).

Symantec also offer their File Share Encryption perpetually (updates are charged for) at a cost of 186.68 €.

Both are professionally maintained and have been audited. They’re nowhere near as simple to use as AxCrypt 2 but they’re an option.

You can get free, open source software (7-Zip is okay) but development is slow, you have bugs and the encryption isn’t perfect.  There is a password breaker here for 7-Zip or you can get cloud cracking software for 7-Zip which vastly speeds up breaking the software.

7-Zip have also had severe vulnerabilities discovered in their software. Their unpaid developer doesn’t have the time to patch everything. That’s why a paid model is used by most software developers. Zip files have other vulnerabilities not adequately addressed in the format.

For an initial outlay of 40 € (cost of using Amazon’s cloud) I can break the majority of 7-Zip encrypted archives within 6 hours.