Download OneCritto 2.9.4

OneCritto is free and open source. No license required. Before download, please complete the CAPTCHA.

Before you download

The desktop app runs offline and does not ask for any OneCritto account.
Your master password is never requested on this website.
The CAPTCHA is used only to block automated abuse of the download endpoint.
You can verify each download with the SHA-256 checksum shown below.

SHA-256: 8E6C1D755A57CEB9B81B0E7DE93B733F1839DB7B13595D38D0A38F439847A197

SHA-256: 8D97EB996DF92204B901451E30AC27AA5DB15A1154E2397554E887E7FBCDB4F3

SHA-256: 049221423A5A00345B12104E7CE548549D49432638D4DCD37A1DCDBC3B285632

Code-signing & audit

The Windows .msi installer and the executables inside it are digitally signed with an OV (Organization Validation) Code Signing certificate issued by Actalis Code Signing CA G2 (a publicly trusted Certificate Authority included in the Microsoft Trusted Root Program). The signature uses SHA-256 and is timestamped by an RFC 3161 authority, so the binary remains verifiable even after the certificate expires.

Issuer: Actalis Code Signing CA G2
Subject: Tommaso Marano (organization-validated)
Algorithm: RSA / SHA-256, RFC 3161 timestamp
How to verify: right-click the .msi → Properties → Digital Signatures → select the signature → Details → View Certificate.
From PowerShell: Get-AuthenticodeSignature .\OneCritto-2.9.4.msi | Format-List *

Windows still warns me — what should I do?

Even when an installer is correctly signed, Windows can still show a warning the first times a brand-new OV certificate is seen. This is normal: Microsoft SmartScreen builds reputation over time, based on how many users install the package. Until enough downloads are accumulated, you may see one of the following:

SmartScreen blue dialog ("Windows protected your PC"): click More info → Run anyway. Before clicking, verify the publisher line shows Tommaso Marano and the SHA-256 above matches your downloaded file.
Browser "this file is not commonly downloaded": choose Keep / Keep anyway after checking the SHA-256.
Antivirus quarantine: false positives can occur on freshly signed builds. Submit the file to your AV vendor for re-analysis and, if you trust the SHA-256 above, restore it from quarantine.

Reputation warnings disappear automatically as more users install the package. If you prefer not to wait, the portable ZIP above does not require running an installer.

Prefer to build from source?

Clone the repository, inspect every line, and build it yourself. You get the exact same application.

git clone https://github.com/fabio2js/onecritto.git
cd onecritto
mvn javafx:run

System requirements

Windows: Windows 11 (64-bit). Java runtime is bundled — no separate installation needed.
Linux: 64-bit distribution with glibc 2.17+. Java runtime is bundled.
Disk space: ~120 MB for the application.