Your private files, behind one password
Cryptify is an encrypted file vault for Android. Enter your password to browse your photos, videos, documents and saved passwords. Leave the app and the vault locks again.
Android 9 and laterNo accountNo ads
Once it's unlocked, it works like a file manager
No padlocks or shields on every screen. You're already inside, so the vault looks like the gallery and file apps you know.
Folders, grid and listMake folders, switch between thumbnails and a detailed list, and jump back with the breadcrumbs.
Search and sortFind a file by name. Sort by name, date, size or type.
Select several at onceLong-press to select, then rename, move to another folder, export or delete.
Import from anywherePick files with the system file picker. You can delete the originals after they're in the vault.
Export when you need a file outsideSave a decrypted copy to a folder you choose. Nothing leaves the vault unless you export it.
Files open inside the vault
PhotosSwipe through a folder, pinch or double-tap to zoom.
Video and audioPlay and scrub. Only the part you watch is decrypted, in memory.
PDFPage through with a page counter.
TextRead plain text files. Text can't be selected, so nothing reaches the clipboard.
Your passwords, in the same vault
A Passwords folder sits at the top of your vault. What you save there is encrypted with everything else and opens with the same password.
Save what you needA title, username or email, password, website and notes for each entry.
Search by title, username, website or notesThe list stays in title order. Passwords themselves are never searched.
Hidden until you choose to show itA revealed password hides again when you switch apps.
Generate strong passwordsChoose a length from 8 to 64 and the kinds of characters, and leave out look-alikes such as I, l and 1.
Copy and pasteCopy a username or password to paste it elsewhere. Cryptify doesn't fill in passwords in other apps.
The clipboard clears itself
- 30 s
- 1 min
- 2 min
Choices in Settings. 30 seconds is the default. Locking the vault clears it at once.
What happens to a file you import
Each file is encrypted on its own, so the vault is a folder of separate encrypted files rather than one big container. File names, folders and types are encrypted too.
- password → Argon2id → key
- Your password is stretched with Argon2id, tuned to take about a second on your phone, so guessing passwords is slow.
- key → master key
- That key unlocks a random master key, stored wrapped with XChaCha20-Poly1305. A wrong password simply fails to unwrap it.
- master key → content, index, thumbnail, password keys
- Four separate keys are derived with HKDF-SHA256, one for each kind of data.
- file → AES-256-GCM, 1 MiB segments
- File contents are encrypted in segments, so a video can be scrubbed without decrypting the whole file. Each file is bound to its own ID, so encrypted files can't be swapped.
- names, folders, types → SQLCipher index
- Everything that describes your files lives in a separate encrypted database, along with the titles, usernames, websites and notes you save.
- saved password → XChaCha20-Poly1305
- Each password you save is encrypted again on its own inside that database, and bound to its entry so it can't be moved to another.
Changing your password re-wraps the master key. No file has to be encrypted again.
Nothing decrypted is written to storage. No temporary files and no thumbnail or video cache. Thumbnails are made on the phone and stored encrypted.
It locks when you leave
Switch to another app and the vault locks after the delay you choose. Turn the screen off and it locks straight away.
- Immediately
- 30 s
- 1 min
- 5 min
- 15 min
Auto-lock choices in Settings. 30 seconds is the default.
Instant lock
Files leave the screen at once, with no fade. The keys are wiped from memory when the vault locks.
Optional biometric unlock
Unlock with a strong biometric. It turns off when you change your password or your enrolled biometrics change.
No screenshots inside
Screenshots, screen recording and the recent apps preview show a blank screen while Cryptify is open.
Slower after wrong passwords
After three wrong tries, each new try waits longer: 1 s, 2 s, 4 s and up to 30 s.
The password stays hidden
It's hidden as you type. If you reveal it, it hides again when you switch apps.
The clipboard clears on lock
A username or password you copied clears when the vault locks, unless you've copied something else since.
A second password, for when you're made to unlock
A decoy vault has its own password, files and saved passwords. If someone makes you unlock Cryptify, enter the decoy password instead. Inside, it looks like an ordinary vault and doesn't mention the other one.
- vault password → your vault
- Opens your files and passwords, as it always has.
- decoy password → decoy vault
- Opens a separate vault with only what you chose to put in it.
- any other password → Wrong password
- The same message after the same wait, whichever vaults exist.
Set it up in Settings
Choose a second password of at least 8 characters. Then lock, unlock with it and add what you want it to show.
A forced fingerprint can't open your vault
A vault with a decoy can't use biometric unlock. The decoy vault can.
Remove it when you like
From the vault that created it. Its files and passwords are deleted, and its password stops working.
What a decoy can't hide
- How much the app stores. Android's app info and the backup file show the size of both vaults together. Put enough in the decoy that it looks believable.
- Someone who examines the phone's storage and knows how Cryptify works can tell that more data is stored than the decoy shows. They can't tell what it is.
- A decoy vault doesn't change any legal duty you may have to disclose a password.
What it protects, and what it doesn't
An honest list, so you know what you're relying on.
Protected
- Your files, file names, folders and file types, encrypted on the phone.
- Thumbnails and settings, kept in the same encrypted storage.
- Saved passwords, usernames, websites and notes, encrypted with the rest of the vault.
- A copy of the vault folder. Without your password it shows no names and no contents.
Not protected
- A forgotten password. There is no recovery. If you forget it, nobody can open your files or saved passwords, including us.
- Malware already running on the phone while the vault is unlocked.
- How many files you have and roughly how big they are. Someone with the vault folder can see that much.
- Originals you delete after importing. Deleting on flash storage is not a secure wipe, and they may still be recoverable.
- Files you open in another app. That app receives the decrypted file and may keep a copy.
- A password you copy, until it clears. The app you paste into and your keyboard may be able to read it. If Android closes Cryptify first, it stays on the clipboard until something replaces it.
No account, no internet access
Cryptify doesn't have the internet permission, so it can't send your files, your passwords, or anything about them, anywhere.
No networkNo ads, no analytics, no crash reporting, no cloud. The app works entirely offline.
No accountNothing to sign up for. The vault and its password exist only on your phone.
Encrypted backupsSave the whole vault, including saved passwords and any decoy vault, as one encrypted .zip and restore it on another phone with your password. Android's cloud backup is off for Cryptify, so the vault isn't copied to your Google account.
Privacy policy
Effective 6 November 2026
Cryptify is an encrypted file vault for Android made by Lineup Studio. This policy explains what happens to your information when you use it.
The short version
Cryptify does not collect, store on any server, or share any personal data. It has no accounts, no ads, no analytics and no internet access. Your files, saved passwords and everything about them stay on your phone, encrypted.
What stays on your phone
- Files you import are encrypted with keys derived from your password and stored in the app's private storage. File names, folders and types are kept in a separate encrypted index.
- Thumbnails are made on your phone and stored encrypted.
- Saved passwords: the titles, usernames, passwords, websites and notes you save in the Passwords folder are kept in the encrypted index. Each saved password is also encrypted on its own.
- A decoy vault, if you create one, has its own password, files, saved passwords and settings, protected the same way.
- Settings such as the auto-lock delay are stored in the encrypted index.
- Your vault password, and any decoy password, is never stored. It is used on your phone to derive the key that opens the vault, then cleared from memory.
We cannot see, open or recover any of this. If you forget your password, nobody can open your files or saved passwords, including us.
What we collect
Nothing. Cryptify has no internet permission, so it cannot send data anywhere. It contains no analytics, crash reporting or advertising code.
Permissions
- Notifications show progress while files are imported or exported. They never contain file names.
- Biometrics (optional) let you unlock with a fingerprint or face through Android's own prompt. Cryptify never receives your biometric data; Android only confirms the match and releases a key held in the phone's secure hardware.
- A foreground service keeps an import or export running while you wait for it.
Cryptify reads and writes files only through Android's file picker, for files and locations you choose.
When data leaves the app
- Export saves decrypted copies of the files you select to a location you choose.
- Copy puts a saved username or password on Android's system clipboard so you can paste it. The app you paste into and your keyboard may be able to read it. Cryptify marks it as sensitive and clears it after the time you set in Settings and when the vault locks, unless you have copied something else since. If Android closes Cryptify first, it stays until something replaces it.
- Backup saves the whole vault, including saved passwords and any decoy vault, as an encrypted file to a location you choose. It stays encrypted and needs your password to open after restoring.
- Open with another app lets an app you pick read one decrypted file while the vault is unlocked. That app may keep its own copy, and its own privacy policy applies.
Android's cloud backup is turned off for Cryptify, so the vault is not copied to your Google account.
Deleting your data
Delete files and saved passwords inside the app. Removing a decoy vault from the vault that created it deletes its files and saved passwords. Uninstall Cryptify to remove everything from your phone. Exports and backups you saved elsewhere are not removed by uninstalling; delete them yourself if you no longer need them.
Children
Cryptify is not directed at children under 13 and collects no data from anyone.
Changes
If this policy changes, the new version will be posted here with a new effective date. If Cryptify ever starts collecting data, this policy and the Google Play Data safety section will be updated before that version is released.
Contact
Questions about this policy: lineupdeveloper@gmail.com