Offline · Zero-knowledge · Android

Your private files,
sealed on your device.

Krypta is an encrypted vault for the photos, videos, documents and notes you’d rather keep to yourself. Locked behind a PIN, encrypted with the same cipher trusted by security professionals — and they never leave your phone.

No accounts No servers No tracking No ads
Krypta

My Vault

42 items · all encrypted
Photos
18
Videos
6
Documents
11
Audio
7

Most “private” apps quietly send your files to a server. Krypta has no server to send them to.

Encryption happens on your phone, with a key only your phone holds. Even we couldn’t read your vault if you asked us to — there’s nothing to read.

What’s inside

A real vault — not a hidden folder.

Pull in anything sensitive, view it without ever decrypting it to the camera roll, and keep your most private notes sealed alongside it.

Capture into the vault

Shoot photos and videos with the built-in camera and they’re encrypted on the spot — the originals never touch your camera roll.

Built-in viewers

Open images, play videos and audio, and read PDFs right inside Krypta. Files are decrypted to a private cache and wiped the moment you lock.

Secure notes

Passwords, codes, private writing — stored inline inside the encrypted index. No separate file, no plaintext ever written to disk.

Document scanner

Scan paper documents with edge-detection and multi-page support, combined into a single encrypted PDF without a plaintext copy left behind.

Decoy PIN & intruder photo

A second PIN opens a harmless decoy vault. Turn on intruder capture and a wrong PIN silently snaps a front-camera photo, just for your eyes.

Encrypted cloud backup

Optionally back up to your own Google Drive. The archive is encrypted on your phone first — Google only ever stores ciphertext it can’t read.

The security model

Your PIN unlocks the vault. It never becomes the key.

Krypta uses layered “envelope” encryption bound to your specific device, so a stolen vault file is useless without the phone it came from.

Your 6-digit PIN stretched with Argon2id

Deliberately slow and memory-hard, so guessing is expensive even with the file in hand.

Combined with a per-device secret Android Keystore

A hardware-backed secret that never leaves the phone — this is what makes offline brute-force impossible.

Wraps a vault master key, which wraps each file’s key

Every file gets its own data key. Changing your PIN re-wraps one key — your files are never re-encrypted.

The file is sealed with XChaCha20-Poly1305

Authenticated encryption in independent chunks — tampering, reordering or truncation is detected and rejected.

Under the hood audited primitives

No home-grown crypto. Krypta builds on libsodium — the same well-reviewed library used across the security industry.

File cipherXChaCha20-Poly1305
Key stretchingArgon2id
Device secretHardware Keystore
ArchitectureEnvelope (KEK→MK→DEK)
Network callsnone, unless you back up
Three steps

Private in about a minute.

No sign-up, no email, no waiting on a verification code. Set a PIN and you’re in.

Set a 6-digit PIN

On first launch you create the PIN that unlocks your vault. There’s no account and nothing to remember beyond it.

Add your files

Import from your gallery or files, capture with the camera, scan a document, or jot a secure note. Each is encrypted as it lands.

Lock it down

Krypta auto-locks and wipes its decrypted cache. Re-open, enter your PIN, and everything is right where you left it.

Backup, your way

Lose your phone — not your vault.

Backup is always optional and always encrypted before it leaves your device. Choose the recovery method that fits you.

Simple · default

Protect with your PIN

Nothing extra to memorise. Restore on a new phone with the same PIN you already use.

  • Easiest to live with day to day
  • Restorable on any device
  • A clear warning explains the trade-off
Good to know

Questions, answered.

Can Krypta — or anyone — see my files?
No. Your files are encrypted on your device with a key derived from your PIN and a secret that never leaves your phone. There is no Krypta server, so there’s nowhere for your data to go. Even if someone copied your vault file, they couldn’t decrypt it without your specific device and your PIN.
What happens if I forget my PIN?
Because your PIN protects the encryption key and we never store it, there is no “reset PIN” we can offer — that’s the point of zero-knowledge encryption. If you’ve enabled backup, you can restore on a new install with your backup PIN or recovery phrase. Otherwise, a forgotten PIN means the vault can’t be opened.
What does Krypta upload to Google Drive?
Only if you turn backup on. Krypta encrypts a single archive on your phone first, then uploads it to a hidden app-only folder in your own Google Drive. Google stores ciphertext it can’t read, Krypta can’t see your other Drive files, and we never receive any of it.
If I uninstall the app, what happens to my files?
Uninstalling removes all on-device Krypta data, including the device key — so the encrypted files become permanently unrecoverable. If you might reinstall, enable backup first. A backup can be restored later; an uninstall without one cannot.
Does Krypta need an internet connection?
No. Krypta is fully offline. The only time it touches the network is to upload or download your encrypted backup, and only when you explicitly enable Google Drive backup.
Is it really free of ads and tracking?
Yes. No advertising SDKs, no analytics, no third-party trackers, no account. There’s nothing to monetise because Krypta collects nothing about you.

Free forever — and staying that way.

Krypta has no ads, no subscriptions, and collects no data. It’s kept free by people who chip in. If it protects something you care about, you can help keep it going and fund what’s next.

Krypta

Keep the private things private.

Download Krypta and put a real lock on your most personal files — encrypted on your device, answerable to no one but you.