ImageSmasher 1.0.2 — Release Notes

[LXB Studio]

TL;DR: AVIF and HEIC are now first-class input formats. Multi-size export, watch-folder automation, a CLI binary, macros, and right-click integration all land in this release. Auto-update infrastructure means you’re reading these notes through it. Installers are now signed by LXB Studio LLC — the SmartScreen warning will fade as reputation builds. Existing 1.0.0 / 1.0.1 users: you’ll need to re-enter your license key after upgrading (details below).

✨ What’s new

AVIF and HEIC input. Drop iPhone screenshots, AVIF assets from a designer, or any common image format and convert to AVIF / WebP / PNG / JPG. The HEIC decoder is built in — no Microsoft HEIF Extension required.

Multi-size export. Generate every responsive-image variant from a single source in one parallel pass. Useful for hero images, OG cards, and anywhere you’d otherwise be resizing the same source 10 times by hand.

Watch folder. Point ImageSmasher at a folder; new images dropped in get auto-converted as they land. Per-file event log so you can see exactly what was processed.

CLI binary. imagesmasher-cli convert in.png out.avif --quality 80 --max-dim 1920 for scripting and CI. Plus info and --help. Same conversion engine as the GUI.

Macros. Save your “format + quality + size + output dir” recipes as named actions and run them with one click. Three built-ins ship; you can add your own.

Right-click integration. Adds “Convert with ImageSmasher” to Windows Explorer’s context menu. Per-user, no admin required, removable from Settings.

Auto-update. Checks imagesmasher.com on launch. Settings has a “Check for Updates Now” button. The release notification points you at the download page — no automatic install, you stay in control.

🔒 Installers are now signed

ImageSmasher 1.0.2 installers are code-signed by LXB Studio LLC with an RFC-3161 trusted timestamp. Right-click the installer in Windows Explorer → Properties → Digital Signatures to confirm. The signature stays valid even after the certificate eventually expires, thanks to the timestamp.

SmartScreen reputation builds per-publisher over time, so you may still see “Windows protected your PC” on first run. The signature itself is valid — SmartScreen is just unfamiliar with our publisher fingerprint. Click More info → Run anyway, same as before. The warning will fade as more installs accumulate.

SHA-256 hashes for both installers remain published on the documentation page for an additional integrity check if you want it.

⚠️ 1.0.0 / 1.0.1 users: re-enter your license key after upgrading

This is the one piece of friction in the upgrade and it’s worth flagging clearly. The machine fingerprint algorithm has been strengthened — it now factors hostname, OS, and architecture in addition to the machine ID. This is a security improvement (it makes offline tokens significantly harder to spoof), but it does mean previously-issued offline tokens are not valid under the new algorithm.

After installing 1.0.2, open the Pro license window and re-enter your key. Your activation count is not affected — the re-entry doesn’t consume an activation. If you’ve forgotten your key, check your purchase email or visit imagesmasher.com/support.

🔧 Smaller wins

• Keyboard shortcuts: Ctrl+O to open, Ctrl+S to save, Ctrl+, for settings, Esc to dismiss
• Native confirm dialogs replaced with the comic-themed UI
• Improved progress reporting in batch + asset-generator runs
• Accessibility: high-contrast focus indicators, aria-labels, custom alert dialogs, screen-reader-friendly status updates
• Decoded-image cache — repeated conversions of the same source decode once, not N times. Asset-generator runs feel snappier.
• Stream decoding for large files — no more compressed-bytes RAM spike before decode starts

🛡️ Under the hood (security)

• Machine fingerprint algorithm strengthened (v1 → v2; see warning above)
• License-storage encryption via Windows DPAPI on the file fallback path (keyring stays primary)
• 2 GiB hard cap on input file size — defends against malicious or malformed inputs
• Server-side rate limiting on the licensing API at imagesmasher.com
• RSA signing key for offline tokens migrated from in-binary to server-side. The “extract the key from the .exe” attack is no longer possible.

📥 How to upgrade

Download the new installer from the Download page and run it over your existing installation. Your settings, conversion history, and macros are preserved. Re-enter your license key in the Pro window after first launch.

💬 Found something?

AVIF and HEIC input was a substantial pipeline change — if you hit any decode oddities, especially on older HEIC files from earlier iPhone models, please reply or start a new thread in bug reports. Include:

• Input format, source device if known, and approximate dimensions
• Output format and preset used
• What you expected vs. what happened

The CLI is also new territory — feedback on flag names, output formats, or scripting friction is wanted while the surface is still small enough to iterate on without breaking compat.

Thanks again to everyone who reported the WebP sizing issue in 1.0.1, asked questions about HEIC support, or helped pressure-test the licensing path. Every release is sharper for it. — LXB Studio

[Author]

Posts