Magpie
Tamper-evident incident journal with encrypted, self-proving exports
Screenshots
Description
People document disputes with a camera roll and a notes app, and months
later it proves nothing: files re-save, dates shift, entries vanish.
Magpie is an incident journal with receipts:
* Every entry (photo, note, file) is hash-chained to the one before it.
Edit, reorder, or delete anything and the chain breaks visibly.
* Everything is encrypted on your device with your passphrase. Locked
means unreadable, including to the app.
* Exports are plain zips carrying your files, the chain manifest, and a
small python script anyone can run to verify the record without Magpie.
* Share the one-line head hash early (email it to yourself, send it to
someone you trust) and the whole record is pinned to that moment.
This app requests no permissions. Photos come through the system camera,
and the operating system refuses every network connection. No accounts,
no analytics, no dependencies. GPL-3.0-or-later licensed.
Honest limits: tamper-evident is not court-admissible by itself, device
timestamps are claims until anchored, and there is no passphrase
recovery on purpose.
Runs on Android 9 and newer, with Android System WebView 84 or newer.
Android 9 has had no security fixes since January 2022, so on a phone that
old Magpie works, but the phone itself is easier to break into.
What’s new (0.6.0)
Backups made with this version need 0.6.0 or newer to restore. Exporting or backing up a journal with big videos no longer runs out of memory, a shared file keeps its name, and auto-lock waits the minute it shows. verify.py reads UTF-8 on Windows, checks an export against a shared head hash with --anchor, and is harder to fool.
Versions
Permissions
What the app asks the system for. Android only grants sensitive access after you confirm it.
- magpie.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Comments