A locked folder for your files

Put anything inside. It gets encrypted on the way in, and the password you chose is the only thing that opens it again.

Version 0.1.0 · 57 MB · Android 7 and later

SHA‑256 a09cefd29ab2d3e2e22fe13e3a892d98a3b4a9cccce38a8193c49ed9049beb5b

This is an early build. Its encryption is checked against published test vectors, and the whole flow — creating a vault, adding a file, locking, reopening — passes an automated end-to-end test. But that test has only ever run in an iOS simulator. Nothing here has been run on a real phone of any kind. Do not put anything in it that you cannot afford to lose.

How it works

Make a vault and give it a password. Make as many as you like; each one has its own.
Add files. They are encrypted before they are stored, one at a time.
Lock it. Without the password there is nothing to read — what sits on disk is indistinguishable from noise, and the file names are encrypted too.
A single file can have its own password, separate from the vault. Then even opening the vault does not open that file, and its name is not shown either.

What it does not do

These are the honest limits, not the marketing ones.

Nobody can reset your password. Not us. There is no account, no email recovery, and no support desk that can help. When you make a vault you are given 12 recovery words; lose both the password and those words and the files are gone permanently.
Nothing is backed up. Lose or wipe the phone and the vaults go with it.
The original file stays where it was. Adding a file copies it. The original is still in your gallery or downloads until you delete it yourself. The app tells you this when you add one.
Opening a large video writes it out briefly. Media players need a real file, so it is decrypted into a temporary folder that is wiped when the app locks and on every launch. Files under 20 MB are opened in memory and never touch disk at all.

Hosted on GitHub Releases · release notes

Installing

Android will warn you before installing an app that did not come from the Play Store. That warning is correct and worth taking seriously — check the SHA‑256 above against the file you downloaded before you open it.

Open the downloaded file, and when Android asks, allow your browser to install unknown apps. You can switch that permission back off afterwards.

Permissions

The app asks for two things: fingerprint or face unlock, and the ability to notice a screenshot. Nothing else.

It has no internet permission at all. That is not a promise written in a privacy policy — the permission is absent from the app, so Android will not let it open a network connection even if it tried. You can check that yourself in Android's app info screen.

Why there is no iPhone version here

Apple does not allow apps to be installed from a website. An iOS version has to go through TestFlight or the App Store.