VaultSeal app icon

VaultSeal

Zero-knowledge offline encrypted vault & peer mesh network for Android, Windows & Linux

About VaultSeal

VaultSeal is an offline-first, zero-knowledge encrypted vault designed to give you complete control and uncompromising privacy over your personal media, confidential documents, and private notes across your Android, Windows, and Linux devices.

Every file is protected with authenticated AES-256-GCM encryption directly on your device. Your master encryption key resides in memory only while actively browsing and is wiped the moment your vault seals or times out. With direct peer-to-peer mesh sync, you can interconnect a secure network of vaults across all your devices without relying on third-party cloud servers, account logins, or remote tracking.

Features

Zero-Knowledge Cryptography

  • Authenticated AES-256-GCM encryption on every stored file, image, video, and note
  • Master keys derived from your passphrase reside in volatile RAM only
  • Instant memory wipe on lock, app switch, or inactivity timeout
  • Hardware-backed biometric authentication (fingerprint / face unlock) via Android Keystore and secure desktop credentials

Interconnected Vault Mesh Network & LAN Sync

  • Interconnected Peer Mesh Network: Link multiple vaults across your Android, Windows, and Linux devices into a coordinated, decentralized mesh network
  • Direct Device-to-Device Sync: Real-time and on-demand synchronization directly over your local network (TLS on port TCP 43885 / UDP 43884)
  • Zero Cloud Intermediaries: No centralized servers, cloud databases, or third-party relays—your encrypted data travels solely between your trusted nodes
  • Secure Device Pairing: Cryptographic PIN code and QR pairing with explicit authorization prompts for new network peers
  • Cross-Platform Parity: Seamless desktop and mobile experience with native support for Android, Windows, and Linux

Dual-State Operations

  • Sealed Ingest: Import photos, videos, clipboard text, and shared files directly into your encrypted vault without ever unlocking or decrypting existing data
  • Unsealed Browsing: Unlock with your passphrase or biometrics to preview, organize, filter, search, and export files
  • Secure in-app camera capture directly into encrypted storage

Flexible Navigation & View Modes

  • Three view modes: High-density List View, Desktop-style Icons View, and Rich Large Preview Cards
  • Folder management, favorites, and quick category filtering (Media, Files, Favorites, Recent)
  • Persistent display preferences and on-demand thumbnail generation

Defense-in-Depth Privacy

  • Screenshot & Recents Protection: Blocks unauthorized screenshots and blanks the app switcher preview
  • Metadata Purifier: Strips sensitive GPS coordinates, device IDs, and EXIF tags before exporting images
  • Clipboard Sentinel: Ingests sensitive copied text with automatic clipboard clearing
  • Auto-Seal Timer: Locks and purges memory keys after customizable idle timeouts (1, 2, 5, or 10 min)

Storage Access Framework & Portable Containers

  • Choose exact folder or micro-SD card locations for your encrypted containers
  • Container files survive app uninstalls for easy backup, cross-device transfers, and mesh storage
  • Foreground sync service for uninterrupted background encryption and mesh sync operations

Pro Features (One-Time Upgrade)

  • Unlimited Vaults: Separate secured containers for work, finance, and personal media
  • Stealth Mode: Disguise VaultSeal with alternative launcher icons on your home screen
  • Break-In Alerts: Timestamped logs and tamper warnings for failed unlock attempts
  • Outbound App Sandbox: Restrict which external apps are allowed to receive exported files
  • 100% Ad-Free: Clean, distraction-free security environment

Privacy & Data Safety

✓ No data collected
✓ Zero cloud intermediaries / 100% offline
✓ Authenticated AES-256-GCM encryption
✓ Direct local LAN peer mesh sync
✓ Android, Windows & Linux native apps
✓ Master keys wiped from RAM on lock

VaultSeal operates entirely offline on your devices and local network. There are no remote servers, no analytics trackers, and no third-party data sharing.

Full privacy policy  ·  Terms of Service  ·  Data safety details

More apps by Kronware