AES-256-GCM Pattern-locked 100% offline

A locked folder isn't a vault.
Umbra is.

Your photos and videos move into a vault only your pattern can open, encrypted on your phone with AES-256. No account, no cloud, no internet permission - so nothing you store can ever leave your device.

Free · No account · Vault contents never leave your device unencrypted

No account No cloud No internet permission AES-256 encrypted
Built privacy-first

Your files never leave your phone unencrypted

No servers to trust, no account to leak. Everything happens on your device - the way private should actually mean private.

Pattern encryption

Draw a pattern on the grid. It derives a 256-bit key that unlocks your vault - AES-256-GCM protects every photo, video and file inside.

A vault per pattern

Each pattern you set opens its own separate vault. Different pattern, different hidden space - with no visible list tying them together.

100% offline

Umbra holds no internet permission at all. Nothing uploads, nothing syncs, nothing phones home. Your vault physically cannot leave your device.

See who tried to get in

Wrong pattern? Umbra logs the failed attempt - and can quietly capture a photo of whoever is holding your phone.

Duress

Decoy vault

Forced to open the app? Enter a decoy pattern and Umbra shows a believable, harmless vault - while your real one stays sealed and invisible.

Your files stay yours

No analytics on your content, no account tied to your identity, no backdoor. Delete the app and the encrypted data goes with it.

How it works

Three steps. No setup wizard.

01

Draw your pattern

Pick a pattern on the grid. Umbra derives a 256-bit vault key from it on your device - the pattern is never stored.

02

Load the vault

Import photos, videos and files. Each one is encrypted with AES-256-GCM as it enters and is stored only in encrypted form.

03

Lock & vanish

Close the app. The keys are discarded from memory. What's left on disk is unreadable without your pattern.

Security model

We don't trust servers.
We trust math.

  • AES-256-GCM encrypts file content, thumbnails and metadata.
  • Pattern-derived key - your pattern unwraps the vault key on-device.
  • No internet permission - there is no network path for data to escape.
  • No account, no email - nothing links a vault to your identity.
// Umbra vault configuration
const vault = {
  cipher: "AES-256-GCM",
  keyFrom: "pattern",
  storage: "on-device only",
  internetPermission: false,
  account: null,
  cloud: false
};

// No server ever receives your files or key.
// Only your pattern decrypts the vault.
The real threat

Someone takes your phone.
Now what?

Most "hidden" galleries just prove you have something to hide. A locked folder is an invitation to keep asking. A calculator disguise fools no one who is actually looking.

Umbra doesn't open to a list of named vaults. Each pattern opens its own encrypted space - and a decoy pattern opens a harmless one, so you can hand over the phone without handing over your life.

Separate what the screen shows from what the device can reveal.

Download Umbra
How Umbra compares

Real encryption & a decoy vault - not a PIN screen

See the side-by-side breakdowns against the tools people usually reach for.

FAQ

Frequently asked questions

What is Umbra?

Umbra is a local-first encrypted vault for Android. It hides photos, videos and files behind a pattern and encrypts them with AES-256-GCM. There's no account and no cloud - the app doesn't even request internet permission.

What happens if I forget my pattern?

Your pattern derives the key that decrypts the vault. If it's lost, the encrypted files can't be recovered - that's the trade-off for real encryption with no backdoor. Choose a pattern you'll remember.

Can anyone see my files - Google, me, the developer?

No. Files are encrypted on your device and never uploaded. Umbra has no server and no internet permission, so there is no path for your content to leave your phone.

Do I need an account?

No account, no email, no sign-up. You draw a pattern and start protecting files.

What is the decoy vault?

You can set a separate "decoy" pattern that opens a harmless vault. If you're ever forced to open the app, you show the decoy while your real vault stays sealed and invisible.

What can I store in Umbra?

Photos, videos and files. Everything is encrypted the moment it enters the vault.

Is Umbra free?

Yes, Umbra is free to download on Google Play. Some advanced features may be offered as an in-app upgrade.

Private should mean private.

Encrypt your photos and videos behind a pattern in seconds. No account, no cloud, no internet permission.

Get Umbra on Google Play