Skip to main content

💩 pooputil

Ever heard of malware?

One of the first things it usually does is scan your drive for common file extensions.

.docx .xlsx .pptx
.pdf  .jpg  .png
.zip  .zip  .txt

Your files are predictable.

pooputil changes that.

pooputil is a small open-source file encryption utility that compresses your files into encrypted .poop containers.

Instead of just hiding files somewhere, pooputil compresses them, encrypts them using AES-256-GCM, derives keys using Scrypt, and can optionally overwrite the original file after encryption.

Whether youre storing backups, documents or just wanna archive stuff safely, pooputil gives you a Python API, CLI and a simple desktop GUI.

v0.0.2

Fixed the broken imports from v0.0.1. Everything should work properly now.

Licensed under GPLv3. Fork it, improve it or build your own project on top of it.


Features

  • AES-256-GCM authenticated encryption
  • Scrypt password derivation
  • Compress before encrypting
  • Custom .poop container format
  • Python API
  • CLI
  • Desktop GUI
  • Optional overwrite-based deletion
  • Backend separated from GUI

Why .poop?

A lot of malware targets common file extensions.

.docx
.xlsx
.pdf
.jpg
.png
.zip

Those are easy to recognize.

pooputil stores encrypted data inside .poop containers instead.

Will this stop malware?

Probably not.

If malware wants to encrypt every file on your disk itll happily encrypt .poop too.

The idea here isnt to beat malware, its to make your actual file contents unreadable without the password while also giving you a funny file extension.


Fun Fact

The .poop file extension was inspired by No Text To Speech.

If you know, you know.

Architecture

pooputil is split into modules kinda like Arduino.

GUI
 │
 ▼
pooputil.core
 ▲
 │
CLI
 │
 ▼
Python API

The GUI is just a frontend.

Most of the work happens inside pooputil.core, so you can import it directly into your own scripts without dragging GUI stuff along.


Crypto

Component Algorithm
Encryption AES-256-GCM
KDF Scrypt
Salt 16 bytes
Nonce 12 bytes
Authentication GCM Tag

I use the cryptography library instead of trying to implement crypto myself.


Secure deletion

After encryption pooputil can overwrite the original file before deleting it

Keep in mind secure deletion depends on your filesystem and storage device SSDs especially don't always behave the same because of wear leveling


Installation

pip install pooputil

Usage

GUI

pooputil-gui

or

python -m pooputil

CLI

Encrypt

pooputil-cli --encrypt "/path/to/data" --password "SuperSecretKey99"

Decrypt

pooputil-cli --decrypt "/path/to/data.poop" --password "SuperSecretKey99"

Python API

from pooputil import core

password = b"SuperSecretPassword"
target = "./important.docx"

if core.is_safe_path(target):
    core.encrypt_target(target, password)
else:
    print("Unsafe path.")

Decrypt

from pooputil import core

restored = core.decrypt_target(
    "./important.docx.poop",
    b"SuperSecretPassword"
)

print(restored)

Disclaimer

This project is meant for legitimate encryption and backup purposes.

Also...

Dont forget your password.

I cant magically decrypt your .poop if you lose it.

You cant unflush a poop if you flushed it.


License

GPLv3.

Release files for pooputil 0.0.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pooputil 0.0.3
File Size Uploaded
pooputil-0.0.3.tar.gz 21.6 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for pooputil 0.0.3
File Interpreter ABI Platform
pooputil-0.0.3-py3-none-any.whl Python 3 none any Details

Total release size: 43.0 kB

Release files / pooputil-0.0.3.tar.gz

Download URL pooputil-0.0.3.tar.gz
Size 21.6 kB
Tags Source
SHA-256 checksum
How to use checksums
68719de36e0382864e32ffc0ff37899a76f7a5f59f87d3ea7ead54aa35343cab
BLAKE2b-256 checksum
How to use checksums
a187250ca65055de589c60cfb8a37e425f73bfc8a467668137a1d44e9205b3f7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Aug 2, 2026.

Transparency log

Release files / pooputil-0.0.3-py3-none-any.whl

Download URL pooputil-0.0.3-py3-none-any.whl
Size 21.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
0ef62d42cf07bc934b2be99608f36d67eb8fc79cf400aa7b40a9e78a2538c205
BLAKE2b-256 checksum
How to use checksums
cec3805f2d74900a2170007f962317d7351e4d46efb0f0f1d7f8a05f1226941a
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Aug 2, 2026.

Transparency log

Release history Release notifications | RSS feed

0.1.4

2 release files

0.1.3

2 release files

0.1.2

2 release files

0.1.1

2 release files

0.1.0

2 release files

This release

0.0.3 This release

2 release files

0.0.2

2 release files

0.0.1

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page