Photos, videos, documents and a private browser behind AES-256-GCM encryption, with the keys kept in the phone's secure hardware.
What it does
- Unlock with biometrics plus a 6-digit PIN.
- A private browser, and a camera that saves straight into the vault.
- Panic wipe destroys every key at once, and the icon can pass as a calculator or a notes app.
What it refuses to do
- No plain file ever touches the disk; everything is encrypted before it is written.
- No cloud backup, and no screenshots of the vault.
- It locks the moment it leaves the foreground.
The hard part
A vault is only as safe as the place its keys are kept.
Every file gets its own AES-256 key inside Android Keystore, in the phone's secure hardware, where it can never be copied out. The database holds only encrypted metadata.
Nothing plain is ever written to disk. Copy the storage off the phone and all you get is encrypted files.
Not finished yet
- Tor: the code is in place, but the Tor daemon is still simulated.
- Pattern unlock: the screen exists, the logic does not yet.
- Database migrations, before version 2.
- Release signing, before it goes on the Play Store.
Built with
- Kotlin
- Android Keystore
- SQLCipher
That is Pionen.
Read to the end, and its shape is yours.