<
8000
/a>Mount, browse, and manage encrypted containers and vaults on Android — no PC required.
VaultExplorer opens VeraCrypt, LUKS, BitLocker, VHD/VHDX, Cryptomator, gocryptfs, and CryFS volumes directly on your device. A native C++ engine decrypts and re-encrypts everything in memory — no unencrypted temp files are ever written to disk, and the app has no internet permission at all.
| Format | Details |
|---|---|
| VeraCrypt | Standard & hidden volumes, custom PIM, keyfiles, every cipher/cascade (AES, Serpent, Twofish, Camellia, Kuznyechik), in-place password change |
| LUKS1 / LUKS2 | xts-plain64, PBKDF2 or Argon2id/i, passphrase or keyfile |
| BitLocker | Password or 48-digit recovery key, including BitLocker To Go |
| VHD / VHDX | Fixed-size and dynamically expanding images that can hold a VeraCrypt, LUKS, or BitLocker volume |
| Cryptomator | Vault formats 7 & 8 (SIV_GCM / SIV_CTRMAC) |
| gocryptfs | Format v2, AES-256-GCM or XChaCha20-Poly1305 |
| CryFS | Format 0.10+, AES or XChaCha20-Poly1305 |
Filesystems read/written inside containers: FAT12/16/32, exFAT, NTFS, and ext2/3/4.
- File explorer — list, grid, and masonry views, breadcrumbs, search, instant folder sizes; the dashboard also shows free/total storage for each container without unlocking it
- Built-in viewers — photos, video/audio (subtitles, speed control), PDF (with search), HTML, and a text/code editor, plus ZIP browsing — all streamed straight from the encrypted volume
- Vault camera — shoot photos and video directly into a container, with optional background recording that keeps going after the screen turns off or the app is minimized
- Item vault — passwords, cards, bank accounts, notes, identities, and licenses stored as encrypted entries, like a password manager built into the container
- Cloud access — open containers straight from Google Drive or pCloud, or from any compatible bridge app (e.g. RSAF or Round-Sync) for WebDAV, S3, Dropbox, and more — the app itself never touches the network
- Open in other apps — expose an unlocked container, or just one subfolder, so other apps can open and save files in it directly; an optional background service keeps a vault mounted so this keeps working after you leave VaultExplorer
- Automation (Beta) — a local broadcast-intent API lets Tasker or MacroDroid unlock/lock a vault and import, export, or securely wipe files, with no UI interaction required. Off by default; each vault opts in separately to a permission tier and is gated by an API token. See
docs/vaultexplorer-automation-setup.mdfor setup - USB OTG — read and write USB drives without root
- Create & format new volumes on device storage or a USB drive
- Up to 8 volumes mounted at once
- Keyfile & Passphrase Generator — Diceware passphrases, custom passwords, high-entropy keyfiles
- Encrypt / Decrypt Files — protect individual files without a full container
- Hash Verifier — check large files against MD5/SHA checksums
- Vault Sync — compare two vaults, copy over what's missing or newer
- Storage Analyzer & Duplicate Finder — see what's using space and clear out byte-identical duplicates
- Split & Join — split a container into chunks, or rejoin them
- Check & Repair — diagnose header or filesystem issues
- No
INTERNETpermission — the app cannot make a network request, period - Nothing unencrypted ever touches disk; decryption and re-encryption happen only in memory
- Master lock via password, PIN, pattern, or biometric, with exponential lockout backoff that survives force-kills
- Optional hardware-backed key caching (Android Keystore, AES-256-GCM) for instant re-unlock
- Screenshots and task-switcher previews are blocked (
FLAG_SECURE), with an extra safeguard that blanks the screen the instant the app is backgrounded to prevent a stale unlocked frame from flashing on resume - Copying a password from the Item Vault marks the clipboard entry sensitive on Android 13+ and auto-clears it 30 seconds later if left untouched; the app also sanitizes corrupted clipboard data from other apps on window focus
- Mask Mode — disguise the app as a working zip-archive browser; hold the title for 2 seconds to reach your real vault
Download the APK for your device's architecture (arm64, armeabi, or x64) from Releases. Requires Android 8.0 (API 26) or newer.
git clone --recurse-submodules https://github.com/R0b0To/VaultExplorer.git
cd VaultExplorer
.flutter/bin/flutter pub get
.flutter/bin/flutter build apk --releaseFlutter itself is vendored as a pinned git submodule (.flutter/) rather than something you install separately — if you already cloned without --recurse-submodules, run git submodule update --init first. You'll also need the Android SDK (26+), Java 21, and CMake 3.18+; the NDK (pinned to r28c) is installed automatically via Gradle. CMake fetches and compiles all native C++ dependencies automatically — see NOTICE.md for exact versions and licenses.
Release builds are reproducible: scripts/reproducible_build.sh <arm64|armeabi|x64> builds a single-ABI APK the same way CI and F-Droid's buildserver do, and scripts/compare_builds.sh diffs two APKs to confirm they match.
GPLv3 — see LICENSE.
