SQLCipher 4.14.0 Release

2026-03-17 08:00:00 -0400

We’re pleased to announce the immediate availability of SQLCipher 4.14.0. This release includes an important SQLite update, restoration of the LibTomCrypt cryptographic provider, and significant improvements for Android.

SQLCipher Core

  • Updates the upstream SQLite baseline to 3.51.3, which fixes a critical WAL-reset database corruption bug. Applications running SQLCipher in WAL mode are strongly advised to upgrade.
  • Reintroduces LibTomCrypt cryptographic provider support based on community feedback
  • Updates the LibTomCrypt provider with improved logging and error handling

SQLCipher Commercial and Enterprise packages also include some important enhancements:

  • Improves commit performance on Unix operating systems
  • Updates OpenSSL-based cryptographic providers to use 3.5.5 LTS

LibTomCrypt Provider Restored

In response to community feedback, we have reversed the decision to remove the LibTomCrypt cryptographic provider that occurred in SQLCipher 4.12.0. LibTomCrypt is now included again with improved error handling and more detailed logging. It is also included as the default cryptographic module for one of our Community Edition packages, and may be used for others in the future.

SQLCipher for Android

SQLCipher for Android has undergone some major changes for this release:

  • Adds Android consumer ProGuard rules to sqlcipher-android for default obfuscation settings
  • Updates Room and androidx.sqlite API versions used with sqlcipher-android (now requires SDK version 23)
  • SQLCipher for Android Community Edition now uses LibTomCrypt as its cryptographic provider

As noted above, the Community Edition of sqlcipher-android is now built with an updated LibTomCrypt 1.18.2. LibTomCrypt has already been used in long-term community builds by third parties for years. This change delivers some tangible benefits to the project:

  • It is now possible to clone sqlcipher-android directly from GitHub and build it immediately for all targets. There are no additional steps required to build or obtain OpenSSL dependencies.
  • It produces a smaller compiled artifact, reducing the footprint on applications.
  • It addresses requests from the community for a simpler, more accessible open source build process.
  • It provides a reduced surface area for false-positive security reports.

Commercial and Enterprise Android packages all continue to use OpenSSL (non-FIPS) or the SQLCipher Cryptographic Module (FIPS), unchanged.

SQLCipher for Windows UWP Deprecation

SQLCipher 4.14.0 is the last release that will include SQLCipher for Windows UWP packages for Commercial and Enterprise licensees.

For context, the SQLCipher for Windows UWP package is a specialized package that uses a WinRT sandbox. In the early days of the Microsoft Store, applications had to strictly adhere to the WinRT sandboxed API, so a special build of SQLCipher was required. However, that is no longer the case. The Microsoft Store relaxed requirements to accept standard Win32 and .NET applications in 2021, around the same time they officially deprecated UWP in favor of newer technologies like WinUI 3.

Given the deprecated state of UWP and WinRT, SQLite has signaled that WinRT API support will be completely removed in the next upstream release. This makes continued maintenance of a UWP-specific SQLCipher package impractical.

Since applications no longer need to use UWP or WinRT packaging to publish to the Store, it is possible for applications using SQLCipher to move to the official SQLCipher for Windows .NET package. All Commercial and Enterprise licensees with an active subscription for SQLCipher for Windows UWP will automatically receive a transfer license which can be used as a drop-in replacement. Code changes shouldn’t be required for applications that are not using UWP-specific APIs. Licensees will be contacted separately with transfer license details prior to the next SQLCipher release.

Cryptographic Provider Matrix

The table below summarizes the cryptographic providers used across SQLCipher packages and platforms:

Edition Platform Cryptographic Provider
Community (non-FIPS) Android based on LibTomCrypt 1.18.2
Community (non-FIPS) Apple Common Crypto (version varies by OS)
Commercial & Enterprise (non-FIPS) Apple Common Crypto (version varies by OS)
Commercial & Enterprise (non-FIPS) Other Platforms OpenSSL 3.5.5 LTS
Enterprise FIPS All Platforms SQLCipher Cryptographic Module
Based on OpenSSL 3.5.5 LTS

Upgrading and Availability

SQLCipher 4.14.0 is available for download now. We recommend testing your applications thoroughly with the new version before deploying to production.

Commercial and Enterprise - On-demand access to new releases of SQLCipher packages are available to all licensees with an active CipherCare support subscription from the Customer Downloads fulfillment site. Subscribers will also receive a separate email notification regarding the update and can contact us at any time for private support directly from the SQLCipher development team. Commercial and Enterprise edition upgrades require a new license code from the SQLCipher fulfillment site for each version. Don’t forget to change the license code in your application(s) when you upgrade.

Community Edition - SQLCipher Community Edition source code is available on GitHub, via AAR packaging for Android, and Swift Package Manager for Apple platforms.

For feedback and questions, please visit our Community Forum or private support channels. Thank you for using SQLCipher!