Rutba Office 2.24.0 adds the Locker: choose a folder and its files are encrypted one by one, where they already are, so a cloud drive or a stolen laptop holds nothing readable.
What changed
- Folders
- Opening
- You decide what is locked
- Working on a locked file
- When it locks
- Saves made while it is locked
and 7 more in the notes
The full notes for 2.24.0
The Locker
Open it from Home, make a password and write down the recovery key. A forgotten password with no recovery key means the files cannot be opened, and nobody at Rutba can get them back.
- Folders. Add a folder and its files are locked in place. Each file is its own encrypted file beside the others, with its name shown or hidden as you choose. A file over 50 MB is kept in pieces, so a cloud drive uploads only the parts that changed.
- Opening. Your password, your recovery key, or Windows Hello on this computer: PIN, fingerprint or face. The password opens a folder on any computer. Changing it leaves Windows Hello and the recovery key working.
- You decide what is locked. New files in a locked folder are listed as not locked until you lock them. Lock or unlock one file, a subfolder or all of them. An unlocked file is an ordinary file in the same place.
- Working on a locked file. Open it from the Locker and a temporary copy opens beside it, hidden. What you save is locked again and the copy is removed.
- When it locks. After the idle time you set, on Lock now, when the computer sleeps or the screen locks, when Office quits, and when you close the Locker window. Clicking or typing in the Locker counts as use. The idle lock and closing the window wait while a document from it is open in an Office window. Any other lock removes the temporary copy from the disk and leaves that document open in its window, where it can still be read. Save still works. What you save waits there, unlocked and hidden, and is locked in when you next unlock.
- Saves made while it is locked. Whatever is in that hidden folder at the next unlock becomes the file's new version, and the Locker does not check which program wrote it. The version before it is kept with the earlier versions, if the folder keeps them. To keep both, use Save as with a new name in the locked folder. The new file is listed as not locked until you lock it.
- Sending one file. Send to someone locks a copy with a password of its own. Attach it to an email in Mail, or save it and send it any way you like. The other person presses Open a sent file in their Locker and needs no locker password of their own. Give the password a different way from the file.
- Earlier versions. A folder can keep up to three earlier versions of each file.
- Rename and delete. Select a file in the Locker to rename it or delete it. A renamed file keeps its earlier versions, though a file over 50 MB can lose its oldest one. Deleting removes those too, and cannot be undone. Close a file before you rename or delete it.
- Rules. A list of patterns in a folder says which files to lock, such as only
*.pdf. - Search. Find a file by name in the folder you are looking at.
Every locked file, folder key file and keyring has its format version written in it. The format is described in FORMAT.md, and files locked with this version will open in every later one. A file made by a newer Rutba Office is reported as needing an update and is left untouched.
The encryption is AES-256-GCM, with keys from scrypt and HKDF-SHA256, all from the standard crypto library that ships inside the app.
Fixes
- Mail drafts. Clicking from one draft to another now shows the second draft's own words. Before, the first draft's words stayed in the form, and Save or Send could put them under the second draft's recipients. A draft you changed is now kept in Drafts when you click away from it. A message clicked in Sent or any other folder now opens to read. Before, an open draft form stayed in its place. The form and the read view now have a Close button that leaves that place empty, and Close keeps your changes in Drafts.
- AI tools. Turning the tools off and on again while an AI app is connected no longer leaves that app shut out of Mail, Calendar, Contacts and databases until it is restarted.
Known limits
- This is the Locker's first version, and it has not had an outside security review.
- Its screens are in English only for now.
- A locked file does not open by double-clicking it in File Explorer. Open it from the Locker.
- Windows Hello is available on Windows only, and only if a PIN or similar is set up there. Resetting the Windows PIN can remove the Locker's key, and then you unlock with the password and turn Windows Hello on again.
- Removing a plain file overwrites it first, but an SSD or a cloud drive's history can still hold old copies. Lock a folder before you sync it.
- A sent file's name shows on the file and in the email. Only its contents are locked.
Gate
Run on Windows (x64) on 2026-11-10, before 2.24.0 was released: 3,777 engine tests, 3,766 passing and 11 skipped where a package they need is not installed; 12 of 12 editing checks; 2,543 of 2,543 application checks; and 16 of 16 windows painted clean.
One check failed beside the others and passed when run again alone at the end of the same gate:
- sheets: Error Checking lists D9 as its own error, with a formula and a reason