Stashio
Download
AES-256-GCM · Argon2id · no internet

Photos nobody else will see.

Stashio encrypts photos, videos and documents right on your phone. Only your pattern opens them. No account, no server, and the app doesn’t even have permission to use the internet.

Get it on Google Play How it works
No account or email
No server or cloud
No internet access
No ads or analytics
Features

A vault that works like an ordinary gallery.

Everything you need to hide photos and documents, and nothing that would give you away.

A pattern on a 5 × 5 grid

You unlock with a swipe, like your phone, just on a bigger grid. The pattern has at least 8 dots and isn’t stored anywhere, not even encrypted.

3.4 billion eight-dot patterns · after 5 mistakes, waits of up to 30 min

A camera inside the vault

Photos and videos go straight into the vault. They never reach the phone’s gallery and are never written to storage unencrypted, not even for a moment.

A decoy vault

A different pattern opens different content. The lock screen always looks the same, so nobody can tell how many vaults you have.

Duress pattern

Opens a vault like any other pattern, but first quietly overwrites all other vaults with random data.

Folders, documents, search

Nested folders, PDFs with previews, text files and search by name across the whole vault.

Encrypted backups

Back up to a file of your choice, by hand or automatically when the vault locks. Only the recovery code opens it, on another phone too.

Locks by itself

When you leave the app and as soon as the screen turns off. Screenshots and the preview in the app switcher are blocked.

Incognito keyboard

The keyboard doesn’t learn folder names or search words, so Gboard won’t suggest them in other apps or sync them to your account.

How it works

Encrypted before anything is written.

Draw your pattern

Argon2id turns the pattern into a key and takes 64 MiB of memory for every attempt. That slows down guessing even on graphics cards.

Your phone’s chip adds its key

A secret from the phone’s hardware (Android Keystore) goes into the key too, so data copied to a computer can’t be opened with the pattern.

The file gets encrypted

AES-256-GCM, right as it’s imported. What stays in storage is a file with a random name, a rounded size and the same timestamp as all the others.

Plausible deniability

How many vaults do you have? Nobody can tell.

Pick a pattern. Each one opens something different, but the lock screen and the files on the phone always look the same.

What someone inspecting the app’s files sees4 slots from the first launch

Four vault slots always exist, even if you use only one. An empty slot looks just like a full one.

Security

Someone takes your phone. Now what?

Stashio assumes your phone may end up in someone else’s hands. Here’s what they would see.

File encryption
AES-256-GCM, Google Tink, streaming
Key from the pattern
Argon2id, 64 MiB of memory per attempt
Tied to the phone
key in Android Keystore, in StrongBox when the phone has one
Recovery code
26 characters, 128 random bits
Attempt limit
after 5 mistakes 30 s, 1, 5, 15, then 30 min
Network
none, the app has no INTERNET permission
In storage
random names, sizes rounded to 64 KiB, every timestamp Jan 1, 2020
Borrows your unlocked phone

Stashio stays locked. Neither the gallery nor a file manager shows anything from the vault.

Copies the data to a computer

Without the hardware key from your phone, they can’t even try patterns.

Forces you to open the vault

You draw the decoy pattern, or the duress pattern.

You lose your phone

A backup and the recovery code bring the vault back on a new phone.

Pricing

Security is the same in Free and Pro.

Encryption, the decoy vault, the duress pattern, backups and the camera are in every plan. Pro adds room.

Stashio

Free

$0forever
  • 2 vaults, say a main one and a decoy
  • 100 files in each vault
  • All security features
Stashio Pro

Monthly

$4.99a month
  • 4 vaults
  • Unlimited files in each vault
  • Cancel anytime in Google Play
Stashio Pro

Yearly −67%

$19.99a year
  • 4 vaults
  • Unlimited files in each vault
  • Works out to $1.67 a month
Stashio Pro

Lifetime

$39.99once
  • 4 vaults
  • Unlimited files in each vault
  • Pay once, no subscription

Prices are in US dollars; Google Play shows them in your currency. When Pro ends, nothing gets locked: vaults and files stay readable, you just can’t add beyond the limit.

Questions

What people ask

What if I forget my pattern?

On the lock screen, tap “Forgot pattern?” and enter the recovery code the app showed you when you created the vault. Your files stay and you set a new pattern. Without the pattern and the code nobody can open the vault, not even us.

Can you see my photos?

No. Stashio has no account, no server and no internet access. Files are encrypted on the phone and the key never leaves it.

What if I lose my phone?

You restore the encrypted backup on your new phone with the recovery code. That’s why you should write the code down on paper and keep it away from the phone.

How many vaults can I have?

Two for free, four with Stashio Pro. Each has its own pattern, recovery code and content, and knows nothing about the others.

What happens if I stop paying?

Nothing gets locked or deleted. You can still open all your vaults and view, export and back up your files. You just can’t add beyond the free version’s limit.

Can I get a refund?

Yes. Within 48 hours of buying, you can ask Google Play for a refund directly in your order history. After that, write to us at support@stashioapp.com with the order number from Google’s receipt (GPA.…). Within 14 days of a payment we refund it without questions; later we decide case by case, for example when Stashio doesn’t work properly on your phone. After a refund Pro ends, but nothing gets locked or deleted.

Can Stashio disguise its icon as a calculator?

No. A calculator disguise won’t fool anyone who knows what to look for. Stashio relies instead on the decoy vault and the duress pattern, which give nothing more away on the phone.

Is Stashio available for iPhone?

Not yet. Stashio is for Android 9 and later.

Your photos, sealed on your phone.

Get it on Google Play

Free · Android 9 and later