Vault Explorer

Mount, browse, and manage encrypted containers and vaults on Android — no PC required.

VaultExplorer opens VeraCrypt, LUKS, BitLocker, VHD/VHDX, Cryptomator, gocryptfs, and CryFS volumes directly on your device. A native C++ engine decrypts and re-encrypts everything in memory — no unencrypted temp files are ever written to disk, and the app has no internet permission at all.

Supported formats

- VeraCrypt: standard and hidden volumes, custom PIM, keyfiles, every cipher and cascade (AES, Serpent, Twofish, Camellia, Kuznyechik), in-place password change. - LUKS1 / LUKS2: xts-plain64, PBKDF2 or Argon2id/i, passphrase or keyfile. - BitLocker: password or 48-digit recovery key, including BitLocker To Go. - VHD / VHDX: fixed-size and dynamically expanding images that can hold a VeraCrypt, LUKS, or BitLocker volume. - Cryptomator: vault formats 7 and 8 (SIV_GCM / SIV_CTRMAC). - gocryptfs: format v2, AES-256-GCM or XChaCha20-Poly1305. - CryFS: format 0.10+, AES or XChaCha20-Poly1305.

Filesystems read and written inside containers: FAT12/16/32, exFAT, NTFS, and ext2/3/4.

Features

File explorer

- List, grid, and masonry views, breadcrumbs, search, and instant folder sizes. - Per-container customisable toolbar. - Dashboard shows free and total storage for each container without unlocking it.

Built-in viewers

- Photos, video and audio with subtitles and speed control, PDF with search, HTML, and a text and code editor. - All streamed straight from the encrypted volume.

Image editor

- Crop, rotate, freehand draw, add text labels, and a redaction box. - Works without ever writing a plaintext temp file.

Archive browser

- Open ZIP, 7-Zip, RAR (RAR4 and RAR5), TAR, gzip, bzip2, xz, and zstd archives in place, including password-protected ZIP and RAR5. - Extract individual entries or everything. - Create new ZIP (with optional AES-256 password), 7-Zip, TAR, ISO9660, or CPIO archives. - Powered by a native libarchive engine, both inside a vault and for archives on regular device storage.

Vault camera

- Shoot photos and video directly into a container. - Optional background recording that keeps going after the screen turns off or the app is minimised.

Item vault

- Passwords, cards, bank accounts, notes, identities, and licences stored as encrypted entries, like a password manager built into the container.

Cloud access

- Open containers from Google Drive or pCloud, or from any compatible bridge app (RSAF, Round-Sync) for WebDAV, S3, and Dropbox. - The app itself never touches the network.

Open in other apps

- Expose an unlocked container, or a single subfolder, so other apps can open and save files directly. - Optional background service keeps a vault mounted after leaving VaultExplorer.

Share Sheet integration

- Let other apps hand files to VaultExplorer through Android's Share menu, straight into a folder inside a vault. - Off by default.

Automation (Beta)

- Local broadcast-intent API for Tasker or MacroDroid: unlock and lock a vault, import or export files or folders, securely wipe files, and trigger the vault camera headlessly. - Off by default. Each vault opts in separately, gated by a permission tier and an API token. Camera capture needs its own explicit opt-in.

Other tools

- USB OTG read and write without root. - Create and format new volumes on device storage or a USB drive. - Composite containers: spread a VeraCrypt volume across several ordinary media files, with high-entropy growth and all carriers required to unlock. - Up to 8 volumes mounted at once.

Tools tab

- Keyfile and passphrase generator (Diceware, custom passwords, high-entropy keyfiles). - Encrypt and decrypt individual files. - Hash verifier for MD5 and SHA checksums. - Vault Sync to compare two vaults and copy what is missing or newer. - Storage Analyzer and Duplicate Finder. - Split and Join for containers. - Composite Container creation. - Check and Repair for header or filesystem issues. - Header Backup and restore.

Security and privacy

- No INTERNET permission: the app cannot make a network request. - Nothing unencrypted ever touches disk; decryption and re-encryption happen only in memory. - Master lock via password, PIN, pattern, or biometric, with exponential lockout backoff that survives force-kills. - Optional hardware-backed key caching (Android Keystore, AES-256-GCM) for instant re-unlock. - Screenshots and task-switcher previews are blocked with FLAG_SECURE, plus a safeguard that blanks the screen the instant the app is backgrounded. - Copying a password from the Item Vault marks the clipboard entry sensitive on Android 13+ and auto-clears it after 30 seconds. - Mask Mode: disguise the app as a local file manager for your device's real storage. Hold the title for 2 seconds to reach your real vault.

License

GNU General Public License v3.0