Secure any installed application instantly, encrypt private photos and videos with AES-256-GCM, catch intruders with silent camera snapshots, and protect your credentials. Zero analytics, zero servers, complete local privacy.
Silent CameraX Snapshot on Wrong PIN
Protected by AES-256
Hardware-backed MasterKey AES-GCM
Every capability in VaulTool is built directly into the client code. No mock data, no remote telemetry, and no compromise on privacy.
Intercepts protected apps immediately before any sensitive UI or contents render on screen. Powered by Android's AccessibilityService API for fast foreground window detection.
Encrypts photos, videos, and private files into isolated app-private internal storage. Completely stripped from the public Android MediaStore and gallery applications.
When someone enters an incorrect PIN, the device front-facing camera silently snaps a photo. The image is encrypted into private logs with precise timestamp and triggering package info.
Set a secondary decoy PIN. If forced to unlock under duress, entering the decoy PIN presents an empty, legitimate-looking vault space without displaying any real files or logs.
Store logins, accounts, URLs, and secure notes inside an encrypted Room database. Features category grouping and an automated 60-second clipboard clearing timer for leak prevention.
Configure automated lock windows (e.g., 21:00 to 07:00) per application. Android WorkManager routines run in the background to enforce locks during your specified schedule.
Enforces the operating system FLAG_SECURE window policy. Blocks other applications, malicious screen recorders, and Android task switchers from capturing your vault.
Package confidential files into password-protected, encrypted .vshare files. Receivers can verify the file directly in VaulTool with your assigned PIN.
Export your encrypted database and vault files into a portable ZIP backup archive, or sync directly to your private Google Drive app storage with one tap.
Prominent Disclosure: VaulTool uses the Android AccessibilityService API solely to detect when a locked app is launched in the foreground (monitoring window state changes), allowing VaulTool to display the PIN lock screen before the app content appears.
Strict Privacy Commitment: VaulTool does NOT collect, store, read, or share any personal information, screen contents, typed keystrokes, or browsing data through the Accessibility Service. All operations remain 100% local on your device.
For more details, review our full Privacy Policy.
Clear, technical answers regarding VaulTool permissions, security, and operation.
On modern Android versions, background applications cannot monitor window transitions without AccessibilityService. VaulTool uses this permission strictly to identify when an application you chose to protect is opened, so it can display the PIN/Biometric lock overlay before unauthorized individuals can see the app. VaulTool never inspects screen contents or logs keystrokes.
You can configure a secondary Decoy PIN in Settings. If someone forces you to unlock your phone, entering the Decoy PIN unlocks an empty, simulated vault environment. None of your real encrypted files, password entries, or intruder logs will be displayed or accessible.
When Failed Attempt Protection is enabled, VaulTool quietly triggers the front camera via CameraX to snap a photo of the intruder without flashing or making a sound. The picture is immediately encrypted with AES-256 and added to your Intruder Break-in Log along with the exact date, time, and target application.
All items reside exclusively in the protected internal storage directory of your device (/data/data/com.vaultool.app/files/vault). Files are encrypted with AES-256-GCM using keys stored in the Android hardware keystore. No external servers ever receive your files.
VaulTool supports Android 8.0 (API level 26) through Android 16 (API level 36), ensuring compatibility across modern Android smartphones and tablets.
