Release History

What's New in CryptoTrace

A chronological record of product improvements, detection updates, and release notes.

v5.1.3 — 2026-10-16

Trial, Home and Technician: Trial has no scan-count or file-count quota. Find wallets completes the search and shows findings, with exact filenames and locations masked. Activate Home or Technician to reveal the same results without rescanning; trial reports and history keep Find locations masked. Undelete wallets offers free read-only candidate previews with masked names and metadata. Preview writes no recovered files, folders or manifests. Activate Home or Technician to restore eligible files to another physical disk. Candidates do not guarantee recovery, access or funds. Recover access offers free compatibility inspection and search estimates. Running password searches, saving protected recovery sessions and viewing recovered secret material require Home or Technician. Free tools include backup inspection and comparison, one supplied-password diagnostic check, Privacy check with useful file locations, personal history and comparisons, ordinary JSON/HTML reports, and daily/weekly checks while the app is open. Public-address activity is free with explicit online consent. Find locations remain masked until activation.
Drive selections retain the chosen drive. Deep Scan better separates public documentation and example references from recovery material; detection remains evidence to review, not proof of ownership or funds.

v5.1.2 — 2026-10-15

Clearer screens and diagnostics: Refined wallet-access, scan-results and supporting screens, with application diagnostics translated across all ten app languages.
Reliability fixes: Language changes preserve public-activity checks and results. Verification details and queued scan messages are localized, and invalid CLI scan modes are rejected.

v5.1.1 — 2026-10-14

Find wallet files on a PC or old drive: More reliable Deep Scan, local wallet-access recovery, and clearer exclusions, coverage and scan reuse.
Recover a password for an encrypted wallet: You have the wallet file, but the password is missing or uncertain. Recover access works from a preserved copy. Try a password you remember, or define a limited search from your own hints, such as words and variations you may have used. The work runs locally. Supported formats include Bitcoin Core legacy/descriptor wallets, Ethereum v3 PBKDF2/scrypt, standard Electrum encrypted JSON/BIE1 and complete direct MetaMask vaults. Eligible jobs can use a trusted Hashcat GPU backend; CPU fallback and independent CPU verification check the outcome. Protected sessions let you resume eligible work.
Choose what the scan will read: Optional fast reuse trusts file size and modification time. A change that preserves both may be missed. Reuse is a speed choice, not a fresh read.
What can you do with CryptoTrace?: Start with what happened to your wallet. Search a drive for existing files, try to undelete a lost wallet, or work on the password for a backup you still have. Here is how those tools—and the checks around them—work in CryptoTrace.

v4.2.9 — 2026-10-13

Smoother app logos: high-quality image scaling reduces rough edges in both themes, including collapsed navigation and the edition footer. Original artwork, transparency, proportions and display sizes are preserved.

v4.2.8 — 2026-10-13

Matching action buttons: Find wallets, deleted-wallet recovery, Privacy check and Check backup use the same 140 × 40 main button size. Stop and activation states retain that size; long translated labels wrap within the button.

v4.2.7 — 2026-10-13

Consistent Scan button: deleted-wallet recovery uses Scan for both drives and images. When Windows needs administrator permission, Scan explains the restart and preserves the chosen source and output folder. Cancelling starts no scan.

v4.2.6 — 2026-10-13

Clearer scanning controls: New Scan is beside Scan. Scan details stay inside the window with larger text. Drag the finding-panel divider to resize it; long text and activity buttons fit the column. Guidance appears inline instead of a message-only Next step button. Deleted-wallet recovery groups the source, destination and action in one familiar top row.

v4.2.5 — 2026-10-12

Larger Windows icon: transparent outer padding is reduced so the desktop icon fills the normal icon area. Nine native icon sizes keep it clear at different display scales.

v4.2.4 — 2026-10-12

Menu hover: Removed the brief bright flash and fading highlights when moving between app menu items. Selected items retain their highlight in dark and light themes.
License display: Home Edition or Technician Edition is shown at the lower left. “Licensed to:” and the license owner’s email are shown at the bottom right. Unlicensed copies show Trial.
New logos: Updated the app logo, Windows and tray icons, website logo and browser icons.

v4.2.3 — 2026-10-12

Menu hover: Removed the brief bright flash and fading highlights when moving between app menu items. Selected items retain their highlight in dark and light themes.

v4.2.2 — 2026-10-12

Close to tray: On Windows, X minimizes CryptoTrace to the system tray after displaying an explanation. Select “Don’t show this message again” to remember your choice; you can re-enable the message in Settings. Scans can continue while the app runs. Click the tray icon to reopen CryptoTrace, or choose Exit from its menu to close it safely.

v4.2.1 — 2026-10-12

App updates: The update checker compares the installed version locally with public release information. Startup checks are optional and disabled by default; if enabled, one check runs each time the app opens. Manual checks, and startup checks if enabled, contact crypto-trace.app over HTTPS. The host receives your IP address and request metadata. No install ID, license, paths or scan contents are sent. Downloads and installation are manual.

v4.2.0 — October 11, 2026

Search for deleted wallet material: Read supported NTFS drives and save eligible deleted files, seed phrases or keys to another physical disk. Home and Technician; recovery and funds are not guaranteed.
Clearer progress and reliable stopping: elapsed time, records examined and raw bytes read remain visible; delayed progress is explained. Cancelled scans retain partial-result wording, and file workers finish before another scan starts.
Faster metadata reading: a warm-cache synthetic NTFS benchmark took 52% less time after batching reads. This measures metadata processing only; whole-drive recovery speed has not been measured.

Scenario	Before	After v3.5	Result
Synthetic NTFS metadata · 9,920 records	29.28 ms	14.13 ms	52% less time · cached test file

v4.1.1 — October 10, 2026

More reliable checks: repeat scans retain coverage gaps, skipped locations stay visible, and damaged archive members preserve earlier findings.
Safer local records: customer cases stay separate, saved-history access follows your edition, repeat checks avoid duplicate runs, and failed license imports preserve the installed license.

v4.1.0 — October 9, 2026

CryptoTrace 4.1: choose a workspace — A clearer interface, backup diagnostics, before-sharing checks, saved comparisons and opt-in repeat checks.
Wallet & account clues: Find wallet files and recovery material, plus account clues in supported local exchange-email and document exports. Clues do not verify ownership or funds.
Check before sharing: Review readable recovery material, labelled API secrets, password-export CSVs and private-key containers in selected files, folders, ZIPs and DOCX text.
Understand your backups: Identify supported Electrum key-material states, hash and compare backup copies, and test known passwords for supported Ethereum v3 PBKDF2 keystores.
History & comparisons: Save local metadata checks, reopen them after restarting, and compare new, continuing and not-seen evidence. Scope and coverage warnings stay visible.
Repeat checks: Choose daily or weekly checks for a selected location. Runs while the app is open, keeps local baselines, and points you to findings needing review.
Technician handover: Keep customer cases, notes and recorded recovery steps. Queue up to 10 sources, inspect forensic image candidates, and export handover or encrypted evidence reports.
Version 4.1 functions and limits — Limits: local plain-text/EML/MBOX/HTML/CSV/JSON/Markdown exports are supported for account clues, not live inboxes, PST/OST, MIME/base64 decoding or native browser-history databases. Nested/encrypted archives, images, PDF/OCR and unsupported formats are not inspected. No source is modified, uploaded, sanitised or securely erased by these checks. Read Scan details before interpreting any result.

v3.7.0 — September 24, 2026

Verified wallet formats: Bitcoin Core-family Berkeley DB and SQLite wallets, Ethereum keystores, and Electrum containers are validated before they are elevated as recovery evidence.
Recovery readiness: each lead explains its verification state, scan coverage, recovery readiness, and safest next action.
Resumable scans: completed per-scope work can be reused after an interrupted scan instead of starting a large job again.
Technician cases: technicians can organize scan queues and export encrypted .ctcase packages for safer handoff and archival.
Forensic disk images: Technician scans can inspect raw .img, .dd, .raw, and .bin images for supported wallet signatures.
Optional public activity check: users can explicitly request a Bitcoin public-address activity lookup while scan contents and private recovery material remain local.

v3.6.0 — September 10, 2026

Broader wallet recovery coverage: stricter Ethereum checksum handling and improved XRP, Monero, Dash, extended-key, ZIP, and DOCX detection reduce false positives while finding more relevant evidence.
Safer scan boundaries: custom-folder scans stay inside the selected roots, and exclusion handling is more reliable across scan modes.
Older browser profiles: browser-wallet discovery now checks additional historical profile locations for supported Chromium and Firefox-based browsers.
Faster repeat scans: a privacy-safe incremental cache reuses unchanged-file results without storing recovered secrets or full report data.
Clearer progress and outcomes: batched desktop updates keep large scans responsive, coverage counters explain what was inspected, and partial or cancelled scans are identified clearly.
Privacy-safe exports: report output uses consistent redaction so sensitive paths and recovered values are not exposed accidentally.
Stronger license fulfillment: paid-license delivery now performs stricter request and entitlement validation before issuing a license.

v3.5.0 — June 19, 2026

Nearly 5x faster scans: the optimized scanner completed the 2,000-file recovery benchmark in 930 ms best-of-5, down from the documented 4.53 s baseline, with the same 3,200 findings.
Built for bigger drives: a 10,000-file synthetic recovery workload completed in 4.19 s best-of-3, scanning 10,000 files, opening 8,000 eligible files, reading 69.6 MB, and producing 16,000 findings.
Much faster repeat scans: with an unchanged 10,000-file tree, the warm incremental run reused all 10,000 cached file results, opened 0 files, and finished in 1.43 s versus 5.13 s for the cold cache-building run.
Better wallet text detection: UTF-16LE/BE wallet exports and seed phrase backups are decoded before content and mnemonic scanning, closing a false-negative class.
Release validation refresh: the Windows package was rebuilt and verified against the updated app and website version metadata.

Scenario	Before	After v3.5	Result
2,000-file benchmark	4.53 s	930 ms	~4.9x faster
10,000-file cold scan	—	4.19 s	16,000 findings
10,000-file repeat scan	5.13 s	1.43 s	~3.6x faster

v3.1.0 — June 15, 2026

Turbo multithreaded scanning: directory discovery and file analysis now run through separate workers for better throughput on large drives.
Recovery Leads: findings are ranked into scored recovery opportunities with likely wallet family, evidence count, confidence, hidden/full path behavior, and next action.
Real scan workflows: Quick, Deep, Old drive/folder, and Browser extension modes now choose distinct scan targets.
External drive targeting: Old drive scans detect ready removable and non-system drives when no custom path is selected.
Browser wallet storage detection: Known browser wallet extension storage folders are reported as wallet storage artifacts when data exists.
Recovery reports: Pro users can export a readable HTML recovery report with next-step guidance.
Safe summary: Users can copy a redacted support summary without paths, seeds, keys, or full tokens.
Shared reporting engine: GUI and CLI JSON exports now use the same report generator.
Home and Technician licenses: signed licenses now identify the purchased tier; both unlock the complete Pro feature set, while Technician is licensed for commercial use across unlimited customer machines.
Technician scan queue: technicians can add up to 10 unique drives or folders and scan them sequentially, with combined findings, totals, errors, and reports.
Release checks: Added version/package verification and optional code-signing support for Windows packaging.

v3.0.0 — May 18, 2026

Signed Pro licenses: production builds verify license signatures and reject unsigned licenses.
Clearer privacy wording: scan contents stay local, while trial analytics is described precisely.
Guided scanning: scan choices and result summaries better explain what to do next.
Expanded detection: added more wallet apps and browser extension traces.
Stronger validators: improved CashAddr, Bech32m, Monero, and Cardano validation.
Artifact clustering: repeated evidence is grouped for clearer summaries.
Simpler package: wallet definitions are embedded so the Windows ZIP stays small and portable.

v2.05.2 — March 27, 2026

Saved settings: theme, language, profile, exclusions, and scan preferences persist between runs.
CSV and JSON exports: reports became easier to inspect in spreadsheets and technical workflows.
Improved scanning accuracy: validators and filters reduced false positives.
Performance profiles: Balanced, NVMe High, and HDD Safe profiles gave users better control.
More secure downloads: trial and license download links use short-lived tokens.

Try the latest CryptoTrace

Trial has no scan-count or file-count quota. Find wallets completes the search and shows findings, with exact filenames and locations masked. Activate Home or Technician to reveal the same results without rescanning; trial reports and history keep Find locations masked.