BleachBit

bleachbit.org
Awesome Privacy➔ Operating Systems➔ Linux Defenses➔ BleachBit
BleachBit

Clears cache and deletes temporary files very effectively. This frees up disk space, improves performance, but most importantly helps to protect privacy.

Also Consider

Open Source

BleachBit Source Code

Author

bleachbit

Description

BleachBit system cleaner for Windows and Linux

#antiforensics#bleachbit#ccleaner-alternative#disk-cleaner#gplv3#gtk#linux#privacy#python#security#windows

Homepage

https://www.bleachbit.org

Repository

  • LicenseGPL-3.0
  • Created10 Mar 14
  • Primary languagePython
  • Size31,677 KB
  • Stars6,784
  • Forks450
  • Watchers6,784

Language Usage

Language Usage

Project Health

  • Last commit5 days ago
  • Open issues313
  • Latest releasev6.0.3

Top Contributors

Recent Commits

  • GitHub Action(03 Sept 26)

    Update localization files Automatically extracted from ./po/*.po

  • Andrei Stepanov(03 Sept 26)

    Translate to (Russian) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/ru/

  • Andrei Stepanov(03 Sept 26)

    Translate to (Russian) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/ru/

  • Andrew Ziem(02 Sept 26)

    Merge pull request #2314 from XhmikosR/xmr/simplify This is a large commit with a variety of fixes, including dead code removal, refactoring, DRY coding, and performance improvements. Notable performance changes: - Lazy import for xml.dom.minidom - Skip requests module at startup - Single combined keep-list regex - Host MENU_DIRS to module constant - Single locale scan in GuiPreferences Behavior changes: - If a cleaner mixed deep scan with otheractions, then some actions could be hidden. - Fix escaping characters if home path contained regex meta characters. - Checking on startup changed from broken imports to missing imports. The latter is faster, while the former would catch broken modules (e.g., missing C extension).

  • XhmikosR(02 Sept 26)

    Escape the home directory in the keep list regexes

  • Priit Jõerüüt(02 Sept 26)

    Translate to (Estonian) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/et/

  • Aindriú Mac Giolla Eoin(02 Sept 26)

    Translate to (Irish) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/ga/

  • Pin-Hsien Lee(02 Sept 26)

    Translate to (Chinese (Traditional Han script)) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/zh_Hant/

  • Igor Rückert(02 Sept 26)

    Translate to (Portuguese (Brazil)) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/pt_BR/

  • Stephan Paternotte(02 Sept 26)

    Translate to (Dutch) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/nl/

  • bovirus(02 Sept 26)

    Translate to (Italian) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/it/

  • Mr-Update(01 Sept 26)

    Translate to (German) Currently translated at 100.0% (513 of 513 strings) Translation: BleachBit/main Translate-URL: https://hosted.weblate.org/projects/bleachbit/main/de/

  • XhmikosR(02 Sept 26)

    Reuse children_in_directory in the Windows build size helper

  • XhmikosR(02 Sept 26)

    Scan the locale directory once per preferences dialog

  • XhmikosR(02 Sept 26)

    Add Cleaner.has_action_key instead of reaching into cleaner.actions

  • XhmikosR(02 Sept 26)

    Do not let an action without a deep scan hide later deep scans

  • XhmikosR(02 Sept 26)

    Drop the unreachable locale removal in clean_dist_locale

  • XhmikosR(02 Sept 26)

    Move unset_sslkeylogfile to General so startup skips requests

  • XhmikosR(02 Sept 26)

    Deduplicate repeated helpers across Unix, General, GUI and cleaner listing

  • XhmikosR(02 Sept 26)

    Simplify delayed ops, snapd cache, auto_hide and the custom action providers

  • XhmikosR(01 Sept 26)

    Fix copy-pasted docstring on MozillaFavicons

  • XhmikosR(01 Sept 26)

    Avoid per-call work in System.get_commands and the keep list

  • XhmikosR(01 Sept 26)

    Keep heavy imports off the startup path

  • XhmikosR(01 Sept 26)

    Extract sanitize_surrogates instead of repeating the encode code

  • XhmikosR(01 Sept 26)

    Reuse ARCH_BITS and SPLASH_ICON_SIZE_PX instead of recomputing them

  • XhmikosR(01 Sept 26)

    Remove dead code and a shadowed logger

  • XhmikosR(01 Sept 26)

    Deduplicate the Options path setters and the Ini/Json commands

  • XhmikosR(01 Sept 26)

    Simplify redundant conditionals and manual counters

  • XhmikosR(01 Sept 26)

    Remove dead Python 2 era compat shims

  • XhmikosR(02 Sept 26)

    Pass explicitly run_number through env https://docs.github.com/en/actions/reference/security/secure-use#use-an-intermediate-environment-variable

BleachBit Security

6.1/10

Repo Security Summary

Updated 24 Aug 26

  • Code-Review1/10
  • PackagingN/A
  • Dangerous-Workflow10/10
  • Maintained10/10
  • Token-Permissions10/10
  • Binary-Artifacts8/10
  • CII-Best-Practices0/10
  • Security-Policy0/10
  • Fuzzing0/10
  • License10/10
  • Branch-Protection3/10
  • Signed-Releases8/10
  • SAST10/10
  • Pinned-Dependencies2/10

Security Advisories (4)

  • highPatchedCVSS 7.3

    GHSA-q5ww-c3j6-8j23Drop malicious cleaner at %APPDATA%\BleachBit\cleaners\ cause Remote Code Execution

  • highPatchedCVSS 7.8

    CVE-2026-55567Exploit File Delete to Escalate Privilege in BleachBit

  • highPatchedCVSS 7.3

    CVE-2025-32780DLL Untrusted Path Vulnerability in BleachBit <= 4.6.2 for Windows

  • highPatchedCVSS 7.3

    CVE-2023-47113DLL Search Order Hijacking vulnerability in BleachBit for Windows

BleachBit Website

Website

Clean Your System and Free Disk Space | BleachBit

BleachBit is a free, open-source disk space cleaner and privacy manager for Windows and Linux. Shred files, wipe free space, and delete junk files safely.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address104.26.4.78
  • LocationSan Francisco,California,United States of America,NA
  • ISPCloudFlare Inc.
  • ASNAS13335

Associated Countries

  • USUS

Safety Score

Website marked as safe

100%

Blacklist Check

www.bleachbit.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report atweb-check.xyz

BleachBit Reviews

More Linux Defenses

  • chkrootkit

    chkrootkit

    chkrootkit.org

    Locally checks for signs of a rootkit.

    View chkrootkit Report
  • ClamTk

    ClamTk

    gitlab.com/dave_m/clamtk/-/wikis/home

    ClamTk is basically a graphical front-end for ClamAV, making it an easy to use, light-weight, on-demand virus scanner for Linux systems.

    Open Source dave_m/clamtk
    View ClamTk Report
  • Firejail

    Firejail

    github.com/netblue30/firejail

    Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf. Written in C, virtually no dependencies, runs on any modern Linux system, with no daemon running in the background, no complicated configuration, and it's super lightweight and super secure, since all actions are implemented by the kernel. It includes security profiles for over 800 common Linux applications. FireJail is recommended for running any app that may potential pose some kind of risk, such as torrenting through Transmission, browsing the web, opening downloaded attachments.

    Open Source netblue30/firejail
    View Firejail Report
  • Gufw

    Gufw

    man.archlinux.org/man/gufw.8.en

    Open source GUI firewall for Linux, allowing you to block internet access for certain applications. Supports both simple and advanced mode, GUI and CLI options, very easy to use, lightweight/ low-overhead, under active maintenance and backed by a strong community. Installable through most package managers, or compile from source.

    Open Source costales/gufw
    View Gufw Report
  • Snort

    Snort

    snort.org

    Open source intrusion prevention system capable of real-time traffic analysis and packet logging.

    Open Source snort3/snort3
    View Snort Report
  • SysWarden

    SysWarden

    github.com/duggytuxy/syswarden

    Open-source, host-local Linux security orchestrator combining nftables enforcement, system telemetry, threat-intelligence feeds, out-of-band WAAP log analysis and a terminal dashboard. It requires Linux administration and is not an inline proxy.

    Open Source duggytuxy/syswarden
    View SysWarden Report
View More...

About the Data: BleachBit

Change History

Edit BleachBit Data

You can edit BleachBit's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

Delete BleachBit Submit Edit to BleachBit Add alternative

API

You can access BleachBit's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/bleachbit

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share BleachBit

Help your friends compare Linux Defenses, and pick privacy-respecting software and services.
Share BleachBit and Awesome Privacy with your network!

← Previous

Snort

View Linux Defenses (7)
Next →

SysWarden