CipherBox: Encrypt Your Files

CipherBox encrypts your private photos, videos and documents on your device, so they can only be opened with your master password.

Everything is encrypted before it touches storage. Your password never leaves your phone, and neither do your encryption keys. There is no account to create, no server holding your files, and nothing about you is collected.


TAKE PHOTOS THAT ARE NEVER IN YOUR GALLERY

Use the built-in camera and each photo is encrypted the moment you take it. It never appears in your camera roll, is never visible to other apps, and is never registered with your device's photo library. Most "private photo" apps take the picture with the system camera first and hide it afterwards, which means the original existed in your gallery for a moment, and often still exists in a "recently deleted" folder for a month. CipherBox never creates that copy at all.


BRING IN WHAT YOU ALREADY HAVE

Add existing photos and videos from your gallery, or any document from your files. CipherBox can delete the originals for you once they are safely encrypted, so you are not left tidying up by hand. Originals are only ever removed after every file has been encrypted successfully, and always with your device's own confirmation.


OPEN YOUR FILES WITHOUT UNLOCKING THEM TO THE WORLD

View photos, play videos, read PDFs and open text files inside the app. Nothing is decrypted to disk to do it — video streams and decrypts as it plays, a page at a time. Other apps never get a copy, and neither does your storage.


ORGANISE WITH FOLDERS

Sort your vault into folders and subfolders. Folder names are encrypted too, so even the way you organise your files stays private.


BACK UP TO GOOGLE DRIVE, STILL ENCRYPTED

Optional Google Drive backup uploads your files exactly as they are encrypted on your phone. Google stores an unreadable blob. Filenames are replaced with random ones, so even the list of files gives nothing away. CipherBox can only see the folder it creates in your Drive — never the rest of it.

Backup is entirely optional. CipherBox works completely without a Google account.


BUILT TO BE BORING ABOUT SECURITY

• AES-256-GCM encryption, with every piece of a file individually authenticated so tampering is detected, not silently passed through
• Argon2id password hashing, tuned to be slow to attack on purpose
• Screenshots and screen recording blocked, and the app hidden from the recent-apps preview
• Automatic locking when you leave the app
• Optional fingerprint or face unlock
• Excluded from Android's automatic cloud backup, so your vault is never copied somewhere its own encryption no longer protects it


NO PASSWORD RECOVERY. THAT IS THE POINT.

We cannot reset your master password, because we never receive it. If you forget it, your files cannot be recovered — not by us, not by anyone. That is the direct consequence of encryption that actually works, and it is worth understanding before you begin.


WHAT WE COLLECT

Nothing. No analytics, no crash reporting, no advertising, no tracking, no accounts. CipherBox has no servers. We cannot see your files, your filenames, or whether you use the app at all.