Please report security issues privately to info@vi-it.de. Do not publish .codex backup files, passwords, authentication data, SSH keys, private source code or unredacted screenshots in a public issue.

Codex Transfer can protect archives with AES-256-CBC encryption, HMAC-SHA-256 integrity verification and PBKDF2-SHA-256 key derivation. A password is optional. An archive created without a password is not effectively protected from anyone who can access the file.

Only download the executable from the official VI-IT/Codex-Transfer releases page and compare its published SHA-256 checksum.