Vault Explorer

Mount, browse, and manage encrypted containers and vaults on Android — no PC required.

Opens VeraCrypt, LUKS, BitLocker, VHD/VHDX, Cryptomator, gocryptfs, and CryFS volumes directly on your device. A native C++ engine decrypts and re-encrypts everything in memory — no unencrypted temp files are ever written to disk, and the app has no internet permission at all.

Supported formats

- VeraCrypt — Standard and hidden volumes, custom PIM, keyfiles, all ciphers and cascades, in-place password change - LUKS1 / LUKS2 — xts-plain64, PBKDF2 or Argon2id/i, passphrase or keyfile - BitLocker — Password or 48-digit recovery key, including BitLocker To Go - VHD / VHDX — Fixed-size and dynamically expanding images - Cryptomator — Vault formats 7 and 8 (SIV_GCM / SIV_CTRMAC) - gocryptfs — Format v2, AES-256-GCM or XChaCha20-Poly1305 - CryFS — Format 0.10+, AES or XChaCha20-Poly1305

Filesystems read/written inside containers: FAT12/16/32, exFAT, NTFS, ext2/3/4.

Features

File explorer

- List, grid, and masonry views - Breadcrumbs, search, instant folder sizes - Per-container customisable toolbar - Dashboard shows free/total storage for each container without unlocking

Built-in viewers

- Photos, video/audio (subtitles, speed control), PDF with search, HTML, text/code editor - All streamed directly from the encrypted volume

Image editor

- Crop, rotate, freehand draw, add text labels, redaction/blackout box - No plaintext temp files ever written

Archive browser

- Open ZIP, 7-Zip, RAR (RAR4/RAR5), TAR, gzip, bzip2, xz, zstd in place - Extract individual entries or everything - Create new ZIP (with optional AES-256), 7-Zip, TAR, ISO9660, or CPIO archives - Works inside vaults and on regular device storage

Vault camera

- Shoot photos and video directly into a container - Optional background recording

Item vault

- Passwords, cards, bank accounts, notes, identities, and licences stored as encrypted entries

Cloud access

- Open containers from Google Drive or pCloud, or via bridge apps (RSAF, Round-Sync) for WebDAV, S3, Dropbox - The app itself never touches the network

Open in other apps

- Expose an unlocked container or a subfolder so other apps can open and save files directly - Optional background service keeps a vault mounted

Share Sheet integration

- Let other apps hand files to VaultExplorer through Android's Share menu - Off by default

Automation (Beta)

- Local broadcast-intent API for Tasker or MacroDroid - Unlock/lock vaults, import/export files or folders, secure wipe, trigger vault camera headlessly - Off by default; each vault opts in separately

USB OTG

- Read and write USB drives without root

Additional tools

- Create and format new volumes on device storage or USB - Composite containers — spread a VeraCrypt volume across multiple media files - Up to 8 volumes mounted at once

Tools tab

- Keyfile and passphrase generator - Encrypt / decrypt individual files - Hash verifier (MD5/SHA) - Vault sync - Storage analyser and duplicate finder - Split and join containers - Composite container creation - Check and repair - Header backup and restore

Security and privacy

- No INTERNET permission - Nothing unencrypted ever touches disk - Master lock via password, PIN, pattern, or biometric with exponential lockout - Optional hardware-backed key caching (Android Keystore, AES-256-GCM) - Screenshots and task-switcher previews blocked - Clipboard auto-clear for vault passwords - Mask Mode — disguise the app as a local file manager; hold the title for 2 seconds to reach your real vault

Disclaimer

VaultExplorer is an independent, open-source project. Not affiliated with, endorsed by, or connected to VeraCrypt, Microsoft, or any third-party services. All trademarks belong to their respective owners.

License

GNU General Public License v3.0