France’s official Cybermalveillance.gouv.fr platform offers a free decryptor for PyLocky ransomware versions 1 and 2. It can recover files with the supported extensions .lockedfile, .lockymap, and .locky, but it does not remove the infection from the computer. The tool requires Windows 7 or newer and Java Runtime Environment (JRE) 8.
Where to get the official PyLocky decryptor
Download the utility from Cybermalveillance.gouv.fr, the French government’s cybersecurity platform. The French Ministry of the Interior published the free tool on 11 June 2019; the platform’s page was updated on 17 March 2026. The download is a 1 MB ZIP file containing the program and documentation. Read the included documentation before running it.
The tool was developed by ST(SI)², a technical service attached to the French Gendarmerie nationale, using technical information gathered by BEFTI of the Paris regional judicial police during investigations with volunteer security researchers. The government supplies the software “as is,” without express or implied warranty, and cautions that later PyLocky variants may not be decryptable with it. (Cybermalveillance.gouv.fr)
Check whether your encrypted files are supported
The decryptor targets PyLocky versions 1 and 2. Compare the extension appended to encrypted filenames with the supported extensions below. An extension is a useful clue, but it does not by itself prove which ransomware variant affected the computer.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
| PyLocky version | Supported encrypted-file extensions | Source |
|---|---|---|
| Version 1 | .lockedfile and .lockymap |
Cybermalveillance.gouv.fr |
| Version 2 | .locky |
Cybermalveillance.gouv.fr; SecurityWeek |
If your files have a different extension, or the tool does not recognize them, do not assume the decryptor supports that variant. You can also check samples with No More Ransom’s Crypto Sheriff, which can identify ransomware and look for an available tool.
Requirements and recovery steps
The official tool runs on Microsoft Windows 7 or newer and requires Java Runtime Environment 8. The government page does not list support for other operating systems or Java versions.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
- Contain the affected computer. If it may still be compromised, disconnect it from networks and shared storage as appropriate, and seek trusted incident-response guidance before attempting recovery.
- Get the ZIP and documentation from Cybermalveillance.gouv.fr. Avoid third-party download mirrors; use the official platform’s download and follow its included instructions.
- Verify compatibility. Check for
.lockedfile,.lockymap, or.lockyfiles and confirm the computer meets the Windows and Java requirements. - Run the utility as its documentation directs. The government source does not publish a separate step-by-step procedure in the facts available here, so follow the packaged instructions rather than guessing at command-line options or settings.
- Arrange separate cleanup. Decryption restores files; it does not establish that the computer is safe to use. Have the system assessed and cleaned before reconnecting it to normal networks or restoring access to shared resources.
Decryption does not remove PyLocky
Cybermalveillance.gouv.fr explicitly warns: “À noter que le déchiffrement des fichiers ne décontamine pas pour autant la machine infectée par le rançongiciel.” In English, decrypting files does not disinfect the machine infected by the ransomware. File recovery and malware removal are separate tasks; successful decryption is not evidence that the system is clean.
After containment and recovery, consult a trusted security professional or an official ransomware resource for remediation advice. No More Ransom is linked by Cybermalveillance.gouv.fr as an additional place to check for compatible tools; its Crypto Sheriff can help match ransomware samples to available decryptors.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteRank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What PyLocky does
French authorities describe PyLocky as ransomware that encrypts files and demands payment for a decryption key. It commonly spread through email attachments or malicious links and affected businesses, public bodies, associations, independent professionals, and individuals in Europe, including many victims in France. SecurityWeek reported that the Python-written malware spread through spam and encrypted around 150 file types, including documents, images, video, audio, programs, games, databases, and archives. (Cybermalveillance.gouv.fr) (SecurityWeek)
Quick Recap
Best Value
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
