ZipGood security

Mac App Store distribution

ZipGood is distributed through the Mac App Store. Apps on the Mac App Store are reviewed by Apple and must meet Apple's security and privacy requirements, and updates are delivered through the App Store.

App sandboxing

ZipGood is sandboxed and hardened. It runs in a restricted environment with limited access to system resources, which reduces the impact of any potential defect.

Folder access

ZipGood does not have blanket access to your disk. Folder access is granted by you, folder by folder, and remembered as a macOS security-scoped bookmark inside the app container.

Encryption

ZipGood can protect archives with encryption when you create them:

• AES-256 encryption for 7z archives, with optional header encryption to hide the file list
• AES-256 encryption for ZIP archives
• Encrypted DMG disk images

Passwords

Passwords are stored exclusively in the macOS Keychain, encrypted by the operating system. They are never written to disk in plain form and never transmitted.

No network access

The product description states that ZipGood has no network access. Archive processing does not require an internet connection, which reduces the attack surface compared with network-dependent applications.

No data collection

The Mac App Store privacy disclosure for ZipGood is listed as "Data Not Collected." The app does not collect, transmit or share personal data.

Reporting a security issue

If you believe you have found a security issue in ZipGood, email support@nuanyue.com with a description of the issue and, if possible, the steps to reproduce it.