R0b0To/VaultExplorer

VaultExplorer

Android License: GPL v3 Donate

Mount, browse, and manage encrypted containers and vaults on Android — no PC required.

VaultExplorer opens VeraCrypt, LUKS, BitLocker, VHD/VHDX, Cryptomator, gocryptfs, and CryFS volumes directly on your device. A native C++ engine decrypts and re-encrypts everything in memory — no unencrypted temp files are ever written to disk, and the app has no internet permission at all.

---

Screenshots

Dashboard File Explorer Media Viewer File Explorer Media Viewer

---

Supported formats

Format	Details
VeraCrypt	Standard & hidden volumes, custom PIM, keyfiles, every cipher/cascade (AES, Serpent, Twofish, Camellia, Kuznyechik), in-place password change
LUKS1 / LUKS2	xts-plain64, PBKDF2 or Argon2id/i, passphrase or keyfile
BitLocker	Password or 48-digit recovery key, including BitLocker To Go
VHD / VHDX	Fixed-size and dynamically expanding images that can hold a VeraCrypt, LUKS, or BitLocker volume
Cryptomator	Vault formats 7 & 8 (SIV_GCM / SIV_CTRMAC)
gocryptfs	Format v2, AES-256-GCM or XChaCha20-Poly1305
CryFS	Format 0.10+, AES or XChaCha20-Poly1305

Filesystems read/written inside containers: FAT12/16/32, exFAT, NTFS, and ext2/3/4.

---

Features

• File explorer — list, grid, and masonry views, breadcrumbs, search, instant folder sizes, and a per-container customizable toolbar; the dashboard also shows free/total storage for each container without unlocking it
• Built-in viewers — photos, video/audio (subtitles, speed control), PDF (with search), HTML, and a text/code editor — all streamed straight from the encrypted volume
• Image editor — crop, rotate, freehand draw, add text labels, and a redaction/blackout box for photos inside a vault, without ever writing a plaintext temp file
• Archive browser — open ZIP, 7-Zip, RAR (RAR4/RAR5), TAR, gzip, bzip2, xz, and zstd archives in place (including password-protected ZIP/RAR5), extract individual entries or everything, and create new ZIP (with optional AES-256 password), 7-Zip, TAR (plain, gzip, xz, zstd, or lzma), ISO9660, or CPIO archives — powered by a native libarchive engine, both inside a vault and for archives on regular device storage
• Vault camera — shoot photos and video directly into a container, with optional background recording that keeps going after the screen turns off or the app is minimized
• Item vault — passwords, cards, bank accounts, notes, identities, and licenses stored as encrypted entries, like a password manager built into the container
• Cloud access — open containers straight from Google Drive or pCloud, or from any compatible bridge app (e.g. RSAF or Round-Sync) for WebDAV, S3, Dropbox, and more — the app itself never touches the network
• Open in other apps — expose an unlocked container, or just one subfolder, so other apps can open and save files in it directly; an optional background service keeps a vault mounted so this keeps working after you leave VaultExplorer
• Share Sheet Integration — let other apps hand files to VaultExplorer through Android's Share menu, straight into a folder you pick inside a vault. Off by default; turn it on in Settings
• Automation (Beta) — a local broadcast-intent API lets Tasker or MacroDroid unlock/lock a vault, import or export individual files or whole folders (glob-filterable), securely wipe files, and trigger the vault camera (photo or start/stop video) headlessly — all with no UI interaction required. Off by default; each vault opts in separately to a permission tier and is gated by an API token, and camera capture needs its own explicit opt-in on top of that. See docs/vaultexplorer-automation-setup.md for setup
• USB OTG — read and write USB drives without root
• Create & format new volumes on device storage or a USB drive
• Composite containers — spread a VeraCrypt-format volume across several ordinary photo/video/audio/document files instead of one container file. Each carrier's data is appended past its real content as high-entropy "growth" (5%–20%+, your choice of stealth vs. capacity), indistinguishable from normal file noise, and every carrier has to be present to unlock. Create or unlock one from the dashboard like any other container, or from the Tools tab
• Up to 8 volumes mounted at once

Tools tab

• Keyfile & Passphrase Generator — Diceware passphrases, custom passwords, high-entropy keyfiles
• Encrypt / Decrypt Files — protect individual files without a full container
• Hash Verifier — check large files against MD5/SHA checksums
• Vault Sync — compare two vaults, copy over what's missing or newer
• Storage Analyzer & Duplicate Finder — see what's using space and clear out byte-identical duplicates
• Split & Join — split a container into chunks, or rejoin them
• Composite Container — embed and mount an encrypted vault across multiple media files (see Features above)
• Check & Repair — diagnose header or filesystem issues
• Header Backup — back up a container's header (or a folder vault's config file) to an external file, and restore from it later

---

Security & privacy

• No INTERNET permission — the app cannot make a network request, period
• Nothing unencrypted ever touches disk; decryption and re-encryption happen only in memory
• Master lock via password, PIN, pattern, or biometric, with exponential lockout backoff that survives force-kills
• Optional hardware-backed key caching (Android Keystore, AES-256-GCM) for instant re-unlock
• Screenshots and task-switcher previews are blocked (FLAG_SECURE), with an extra safeguard that blanks the screen the instant the app is backgrounded to prevent a stale unlocked frame from flashing on resume
• Copying a password from the Item Vault marks the clipboard entry sensitive on Android 13+ and auto-clears it 30 seconds later if left untouched; the app also sanitizes corrupted clipboard data from other apps on window focus
• Mask Mode — disguise the app as a genuinely usable local file manager for your device's real storage (browse, open, and edit files, including archives — none of it touches any vault or encryption code); hold the title for 2 seconds to reach your real vault

---

Install

Download the APK for your device's architecture (arm64, armeabi, or x64) from Releases. Requires Android 8.0 (API 26) or newer.

Build from source

git clone --recurse-submodules https://github.com/R0b0To/VaultExplorer.git
cd VaultExplorer
.flutter/bin/flutter pub get
.flutter/bin/flutter build apk --release

Flutter itself is vendored as a pinned git submodule (.flutter/) rather than something you install separately — if you already cloned without --recurse-submodules, run git submodule update --init first. You'll also need the Android SDK (26+), Java 21, and CMake 3.18+; the NDK (pinned to r28c) is installed automatically via Gradle. CMake fetches and compiles all native C++ dependencies automatically — see NOTICE.md for exact versions and licenses.

---

License

GPLv3 — see LICENSE.

ko-fi