PrivateVault

PrivateVault – Offline Encrypted File Vault & Manager PrivateVault protects photos, videos, audio, PDFs, documents, archives, notes, and other sensitive files in a local encrypted vault. No account or cloud — your files are encrypted and managed entirely on-device and are never uploaded. PrivateVault encrypts vault content and authenticated metadata on-device. Files stay in app-private storage, outside galleries, media scanners, and file-manager browsing. Ad-Supported Free Edition The Free edition shows ads to support ongoing development, which needs network access for ad delivery only. Ads are non-personalized. Your vault always stays private: encryption, files, passwords, and metadata are handled entirely on your device and are never uploaded, sold, or shared with advertisers. No analytics or telemetry on your vault contents. PrivateVault PRO is completely ad-free and runs fully offline. Strong Password-Based Vault Protection ● AES-256-GCM: protects confidentiality and integrity; altered ciphertext fails authentication ● PBKDF2-HMAC-SHA256: the Free vault uses 500,000+ iterations, a fresh random 32-byte salt, and a 256-bit key ● Strict profiles: KDF parameters are versioned and allowlisted ● Legacy compatibility: supported 310,000+ iteration PBKDF2 credentials remain usable ● Vault passwords are never stored as plaintext or recoverable by PrivateVault ● Supports 8–127 character passwords; 15+ recommended Authenticated Local Storage ● PVL2 encrypted blobs: files stream in independently authenticated chunks with fresh random nonces and authenticated structure ● PVMD metadata: file records, folders, blob references, and repository state use a versioned authenticated format ● Encrypted local activity logs record supported vault actions Encrypted File Manager Import files and folders, search and sort, use thumbnails and list views, multi-select, export, change the vault password, and remove items. Long operations show progress and allow cancellation. Private Capture & Image Viewing Capture photos, video, and audio in-app, straight into the encrypted vault. Free includes private image viewing. Broader media, document, archive, and editing tools are in PrivateVault PRO. Biometric & Local Access Controls Unlock with the vault password or secure biometrics via Android Keystore. Auto-lock, brute-force limiting, vault reset, and local activity logs help control access without sending your vault data to a server. Argon2id Portable Backups ● Newer backups use Argon2id v1.3 (64 MiB memory, 3 passes, parallelism 4), a fresh 32-byte salt, and a 256-bit key ● Headers, manifest, and payloads are authenticated before restore ● Password-based backups can be restored during vault creation; advanced restore controls are a PRO feature Encrypted File Sharing Password-protected PPSH shared files use Argon2id and authenticated encryption, independent of the Free vault KDF. Shared images open after password authentication; other formats remain subject to Free viewing limits. Upgrade to Pv PRO PRO adds an Argon2id-protected live vault with a separate recovery code, 2FA Unlock, Panic Gesture Lock, Intruder Selfie, advanced organization, broader viewing, editing and scanning, Vault Safety Check, more themes, and a completely ad-free, fully offline experience. Password-only backups are compatible with PRO. Current Pv PRO backups require both the vault password and saved recovery code, so they must be restored in Pv PRO. Important Security Boundary Vault content is encrypted at rest. Plaintext you export, share, or open in another app is outside the vault and no longer protected. Forgotten vault or backup passwords cannot be recovered. Security also depends on password strength, device integrity, and control of exported files.