BleachBit
bleachbit.orgClears cache and deletes temporary files very effectively. This frees up disk space, improves performance, but most importantly helps to protect privacy.
- Homepage: bleachbit.org
- GitHub: github.com/bleachbit/bleachbit
- Web info: web-check.xyz/check/bleachbit.org
BleachBit Source Code
Author
Description
BleachBit system cleaner for Windows and Linux
Homepage
https://www.bleachbit.orgLicense
GPL-3.0
Created
10 Mar 14
Last Updated
12 Jul 26
Latest version
Primary Language
Python
Size
27,272 KB
Stars
6,262
Forks
422
Watchers
6,262
Language Usage
Star History
Top Contributors
-
@az0 (5398)
-
@Tobias-B-Besemer (98)
-
@mkhon (88)
-
@tstenner (77)
-
@rados (76)
-
@actions-user (74)
-
@yarons (51)
-
@bovirus (33)
-
@ghostofsparta222 (27)
-
@weblate (23)
-
@Mr-Update (23)
-
@andibing (22)
-
@XhmikosR (21)
-
@theatre-x (19)
-
@Kefir2105 (17)
-
@abitrolly (16)
-
@Chirunos (16)
-
@aindriu80 (15)
-
@NicolaeFericitu (14)
-
@toni-estevez (14)
-
@emintufan (12)
-
@madurapa (12)
-
@linuxned (12)
-
@hugok79 (11)
-
@GuzMan2019 (11)
-
@tiemay (11)
-
@Karm46 (10)
-
@oersen (10)
-
@ChuckMichael (10)
-
@MattHardcastle (10)
-
@arifpedia (10)
-
@to-ba (9)
-
@swoidowski (8)
-
@VasilisKos (8)
-
@monosans (8)
-
@cyphra (7)
-
@ppolewicz (7)
-
@Ricky-Tigg (7)
-
@Ser82-png (7)
-
@inson1 (7)
-
@jdlorimer (6)
-
@igorruckert (6)
-
@strebski (5)
-
@tjw123hh (5)
-
@danielk43 (5)
-
@NorwayFun (5)
-
@Stephan-P (5)
-
@ciampix (5)
-
@ivoxavier (5)
-
@audreytoskin (5)
-
@hahnavi (5)
-
@ryanmusante (4)
-
@ronymesquita (4)
-
@vabaME (4)
-
@flyingbot91 (4)
-
@sanjaykaria (4)
-
@plesry (4)
-
@nelsonhef (4)
-
@matbech (4)
-
@Marvin0401 (4)
-
@NickWick13 (4)
-
@Vistaus (4)
-
@crayxt (4)
-
@bornxlo (4)
-
@ROCKNROLLKID (4)
-
@fitojb (3)
-
@MauroGuida (3)
-
@p-bo (3)
-
@ppasserini (3)
-
@TraistaRafael (3)
-
@catsnote (3)
-
@ducdat0507 (3)
-
@muzena (3)
-
@lannic (3)
-
@SantosSi (3)
-
@zoli111 (3)
-
@uzbadmin (3)
-
@comradekingu (3)
-
@adem4ik (3)
-
@realgooseman (3)
-
@Carml82 (3)
-
@chidoziemanagwu (3)
-
@Zilvador (3)
-
@Atalanttore (3)
-
@IC-Tummarellox-ITA (3)
-
@kenrap (3)
-
@Djaler (3)
-
@Matthaiks (3)
-
@ilNebbioso (2)
-
@mgziminsky (2)
-
@PPN-SD (2)
-
@pas-calc (2)
-
@pereorga (2)
-
@rezaalmanda (2)
-
@torusrxxx (2)
-
@TotalCaesar659 (2)
-
@Ziad1797 (2)
-
@fbruand (2)
-
@klslz (2)
-
@mlaarebi (2)
Recent Commits
-
Andrew Ziem (12 Jul 26)
Merge pull request #2175 from XhmikosR/patch-3 Avoid tempfile.mktemp in the symlink delete test
-
XhmikosR (09 Jul 26)
Avoid tempfile.mktemp in the symlink delete test
-
Andrew Ziem (12 Jul 26)
Remove httpbin.org from tests Is sometimes takes 20-30 second, or it may return 502
-
Andrew Ziem (12 Jul 26)
Improve HTTP status generator validation and error handling - Validate status generators return both 200 and 404 - Skip tests with malfunctioning status generator - Add comments about unreliable generators
-
Andrew Ziem (12 Jul 26)
Merge branch 'macos2'
-
Andrew Ziem (12 Jul 26)
Fix PathUtils for Window - Fixes the new PathUtils to work on Windows - Add Windows-specific tests
-
Andrew Ziem (12 Jul 26)
Remove path utility compat wrappers and add TestPathUtils - Drop temporary _path_* shims in FileUtilities.py - Drop aliases aliases in ProtectedPath.py - Add tests/TestPathUtils.py - Update TestProtectedPath.py to use the public PathUtils names
-
Andrew Ziem (12 Jul 26)
Refactor callers to use PathUtils helpers - Migrate whitelisted_*, check_protected_path, _check_exempt, Cleaner %TEMP%\Low, and GuiPreferences to the new PathUtils helpers - Preserve the Windows drive-root special case - Preserve macOS as case-sensitive in ProtectedPath (for now)
-
Andrew Ziem (12 Jul 26)
Refactor path utilities into separate PathUtils module - Create new PathUtils.py module - Move two functions from FileUtilities.py to PathUtils - Move three functions from ProtectedPath.py to PathUtils - Add compatibility wrappers in FileUtilities.py (to be removed later) - Rename normalize_for_comparison to normalize_path in new module There will be follow-up commits for path-related changes. TestsFileUtilities.py now passes on macOS 26 (Tahoe), while still passing on Ubuntu Resolute (26.04). More work is needed to pass tests on other modules.
-
Andrew Ziem (11 Jul 26)
Add test for fnmatch_translate Follow up to 3fd32029b56da7a66e9888beb1de9c14656e63f7
-
Andrew Ziem (11 Jul 26)
Merge branch 'dev1'
-
Andrew Ziem (11 Jul 26)
Merge pull request #2154 from ugbotueferhire/fix-issue-2123-preserve-temp-folders Preserve Windows temp folder roots
-
Andrew Ziem (11 Jul 26)
Merge pull request #2188 from XhmikosR/patch-2 fnmatch_translate: fix compatibility with Python 3.14
-
Andrew Ziem (11 Jul 26)
Merge pull request #2183 from XhmikosR/xmr/open-files-cache Use a set for the open-files cache lookup
-
Andrew Ziem (11 Jul 26)
Merge pull request #2185 from XhmikosR/xmr/cache-keep-list Cache the keep list to avoid recomputing it per path
-
Andrew Ziem (11 Jul 26)
Merge pull request #2187 from XhmikosR/xmr/winapp-exclude-folder Fix ExcludeKey *.* to exclude the whole folder
-
Andrew Ziem (11 Jul 26)
Merge pull request #2190 from XhmikosR/xmr/validate Validate data with real checks instead of assert This replaces some usage of `assert` with `raise` to catch issues at runtime in production code
-
Andrew Ziem (11 Jul 26)
Improve Mozilla favicons deletion logic and add tests - Extract _remove_path_from_url() as helper function - Simplify favicon deletion to only check domain-level bookmarks - Remove path depth check that incorrectly deleted deep-path favicons - Add test for all-bookmarked case - Add regression test for issue 1537 (deleted favicons) - Add test data for URLs starting with "file://" and "fake-favicon-uri:"
-
XhmikosR (11 Jul 26)
Drop redundant assert
-
XhmikosR (09 Jul 26)
Validate data with real checks instead of assert Asserts are stripped under python -O (and -OO in the frozen Windows build), so checks on untrusted input or safety invariants vanish in release builds.
-
Andrew Ziem (11 Jul 26)
Merge branch 'master' into dev1 # Conflicts: # bleachbit/Memory.py
-
Andrew Ziem (11 Jul 26)
Switch to ubuntu-slim image Update translations and run CodeSQL using the ubuntu-slim image to save resources. https://docs.github.com/en/actions/reference/runners/github-hosted-runners ubuntu-slim: 1 CPU, 5GB RAM ubuntu-latest: 4 CPU, 16GB RAM Both are x65 with 14 GB storage.
-
Andrew Ziem (11 Jul 26)
Merge pull request #2186 from XhmikosR/xmr/imrove-mozilla-favicons Improve Mozilla favicons The argument to `lstrip()` should be a list of characters, while the old code here was treating it like a string to remove. It was used for comparisons and mangled both sides equally. After calling `execute_sqlite3()`, the old code appended more commands to the variable `cmd` without resetting its value, so commands were repeated. This was functionally harmless, but now resetting `cmd` avoids unneeded work. If `ids_to_delete` were empty, then the empty `in ( )` syntax would cause SQLite to emit an error. This PR did not aim to address issue #1537 (bookmark icons deleted), but for clarity, these changes in this PR are not expected to fix #1537.
-
Andrew Ziem (11 Jul 26)
Improve /proc/meminfo parsing - Split parsing into helper function - Add test that helper does not match "SwapCached" - Add test that real /proc/meminfo does not add a false positive This change is a follow up to edba5e55 in which XhmikosR fixed the regex to not match "SwapCached"
-
Andrew Ziem (11 Jul 26)
Merge pull request #2181 from XhmikosR/xmr/file-descriptors Fix file descriptor leaks on read and wipe error paths
-
Andrew Ziem (11 Jul 26)
Fix: debug message had incorrect information After `swapon` failed, the debug message stated "swapoff". This code affected stable releases. The code was last touched in f30388818 (2019) but introduced earlier.
-
Andrew Ziem (11 Jul 26)
Fix: `Got unknown status from AppVeyor API: starting` In GitHub Actions in the 3.9 test under the step "Combine Linux and Windows coverage, uploiad to Coveralls" there have been errors like this ``` Waiting for all jobs to start... Got unknown status from AppVeyor API: starting Failure. Error: Process completed with exit code 1. ``` This came from the appveyor-artifacts script that was last updated ten years ago, so this change adds a replacement that recognizes the "starting" status
-
Andrew Ziem (11 Jul 26)
GitHub Actions: expand paths-ignore to skip more non-code files - Remove dependabot filter that had no affect because of master filter - Add paths-ignore to codeql.yml - Expand the existing paths-ignore section in test_ubuntu.yml
-
Andrew Ziem (11 Jul 26)
Merge pull request #2182 from XhmikosR/xmr/log Fix IndexError and buffer handling in Log.py Users have not reported any related errors. This is a defensive change
-
Andrew Ziem (11 Jul 26)
Merge pull request #2184 from XhmikosR/xmr/stream-file-detect-encoding Stream the file in detect_encoding instead of readlines
BleachBit Security
Security Advisories (3)
- high Patched CVSS 7.8
CVE-2026-55567 Exploit File Delete to Escalate Privilege in BleachBit
- high Patched CVSS 7.3
CVE-2025-32780 DLL Untrusted Path Vulnerability in BleachBit <= 4.6.2 for Windows
- high Patched CVSS 7.3
CVE-2023-47113 DLL Search Order Hijacking vulnerability in BleachBit for Windows
BleachBit Website
Website
Clean Your System and Free Disk Space | BleachBit
BleachBit is a free, open-source disk space cleaner and privacy manager for Windows and Linux. Shred files, wipe free space, and delete junk files safely.
Redirects
Does not redirect
Security Checks
All 65 security checks passed
Server Details
- IP Address 172.67.68.253
- Location San Francisco, California, United States of America, NA
- ISP CloudFlare Inc.
- ASN AS13335
Associated Countries
-
US
Safety Score
Website marked as safe
100%
Blacklist Check
www.bleachbit.org was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
BleachBit Reviews
More Windows Defences
-
Blocks unauthorized webcam access.
-
Anti low-level keylogger: Provides full system-wide key press protection, and target window screenshot protection.
-
Rootkit detection and removal utility.
-
A utility that disables a number of risky Windows features. These "features" are exposed by the OS and primary consumer applications, and very commonly abused by attackers, to execute malicious code on a victim's computer. So this tool just reduces the attack surface by disabling the low-hanging fruit.
-
A utility for configuring encryption protocols, cyphers, hashing methods, and key exchanges for Windows components. Useful for sysadmins on Windows Server.
-
Provides protection against software keyloggers. Encrypts keypresses at driver level, and decrypts at application level, to protect against common keyloggers.
-
Internet traffic control and monitoring tool.
-
Useful utility, that attempts to terminate known malware processes, so that your normal security software can then run and clean your computer of infections.
-
Portable virtual keyboard. Useful for protecting from keyloggers when using a public computer, as it can run of a USB with no administrative permissions.
-
Blocks malicious background applications from taking screenshots.
-
A portable app that lets you disable core Windows features (such as Cortana, Edge) and control which data is passed to Microsoft. (Note: Free, but not open source).
-
A CLI utility that shows file version number, timestamp information, and digital signature details.
-
Detects infected USB removable devices.
-
Capture and interprets network traffic based on a set of rules, and depending on the interactions certain assignments are blocked. Open source, written in Go and delivered as a single executable.
-
Portable app with a GUI, that makes it really easy to safely block key telemetry features, from sending data to Microsoft and other third parties (It uses the Windows API to interact with key features of Local Group Police, Services, Tasks Scheduler, etc).
About the Data: BleachBit
Change History
- Amended (github) #608
API
You can access BleachBit's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/bleachbit The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share BleachBit
Help your friends compare Windows Defences, and pick
privacy-respecting software and services.
Share BleachBit and Awesome Privacy with your network!