Your vault. Your device. No cloud. No recovery.
A fully on-premise, encrypted Android vault — an alternative to Samsung Secure Folder. Store files, photos, videos, and APKs behind AES-256-GCM encryption with biometric unlock, intrusion detection, and stealth mode. All data stays on-device with no cloud storage, no password recovery, and no external dependencies.
Every file is encrypted with AES-256-GCM using a unique 12-byte IV per operation. Master key lives in Android Keystore, hardware-backed when available. 128-bit authentication tags verify integrity.
Set up a PIN (4-16 digits) or password (8+ characters) with a guided wizard. Optionally enable fingerprint unlock. Credentials hashed with PBKDF2-HMAC-SHA512 at 310,000 iterations.
Optional front camera capture on failed login attempts. Progressive lockout doubles from 30 seconds after 3 failures, capped at 1 hour. Optional data wipe after configurable failed attempts.
Import files from device storage with multi-file import and optional source deletion. Auto-categorization for images, videos, audio, documents, and APKs. Real-time search with favorites.
Photo and video grid browser with encrypted thumbnail previews. ExoPlayer integration plays encrypted videos without writing decrypted copies to disk.
Import and encrypt APK files. Install them on demand with metadata extraction (app name, package, version). Work profile support via Android Managed Profile API for app isolation.
Hide from recent apps, disguise the app icon as a calculator, and block screenshots with FLAG_SECURE. Panic button — shake to instantly lock the vault and clear clipboard.
Configurable timeout: immediately, 30 seconds, 1 minute, or 5 minutes. Foreground service with persistent quick-lock notification. Temporary decrypted files cleaned up automatically on lock.
Files are overwritten with random data before deletion — not just unlinked from the filesystem. No recovery tools can reconstruct wiped vault contents.
Designed so that even physical access to the device cannot compromise your data.
Min SDK 28 (Android 9.0), targeting SDK 34 (Android 14). Built with Kotlin and Jetpack Compose using Material 3 theming.
SQLite via Room for file, app, and intrusion log metadata. Three tables with typed DAOs. Android backup and data extraction are disabled.
No network permissions, no cloud sync, no accounts, no telemetry. Files stored as UUID.enc in internal app storage. Uninstalling deletes everything.
Join the SecureStorage beta for early access.
Sign Up for Beta