Locky

Locky — a vault for photos, videos, and documents that cannot be opened against your will. Most "private vaults" rely on biometrics — but biometrics can be applied to the owner without their consent. Locky works differently: the only way to get in is to enter a PIN code. Fingerprint or face unlock is deliberately absent. ━━━━━━━━━━━━━━━━━━━━ HOW THE PROTECTION WORKS ━━━━━━━━━━━━━━━━━━━━ — PIN code (minimum 6 digits) — the only key. — Duress code — a second code you set when creating the vault. When it is entered, the key to the real vault is destroyed irreversibly: the files become permanently undecryptable. No one can recover them, including the developer. — Instead of the real vault, the same PIN opens a decoy vault — with the files you selected in advance. From the outside, entering it is indistinguishable from a normal login. — Hardware key protection — on devices with StrongBox or TEE, the master key is stored in the Android hardware security module. The key is not exported outside and cannot be extracted programmatically. — Each file is encrypted with its own key (AES-256-GCM), wrapped by the master key. — The storage is excluded from Android cloud backups. Data never leaves the device. ━━━━━━━━━━━━━━━━━━━━ ORGANIZATION ━━━━━━━━━━━━━━━━━━━━ — Folders: create, nest, move files between them. — Quick search across the entire vault. — List or grid view with real photo and video previews. — Viewing directly in the app: photos, videos, audio, PDF, documents. ━━━━━━━━━━━━━━━━━━━━ ADDING FILES ━━━━━━━━━━━━━━━━━━━━ — Directly from the app: Files and Photos. — Via the system "Share" menu. ━━━━━━━━━━━━━━━━━━━━ PRIVACY ━━━━━━━━━━━━━━━━━━━━ Locky does not use the cloud, servers, or accounts. All data stays only on your device. The developer has no access to your files and cannot recover them. ━━━━━━━━━━━━━━━━━━━━ IMPORTANT ━━━━━━━━━━━━━━━━━━━━ After the key is destroyed, the files on disk are additionally overwritten with random data. Full physical erasure on flash memory is not guaranteed by any app — the protection is provided precisely by the destruction of the key. Recovery is impossible. If you forget your PIN or enter the duress code, the data will be lost forever. There are no backups, no cloud, and no password reset method.