Cryptomator within OneUi's "Secure Folder"?

As the title says, can you use Cryptomator within OneUi’s own Secure Folder?

Hi,

When you say oneui please confirm you are referring to Samsung mobile phone operating system for Android.

If you’re asking if it’s possible to use cryptometer from inside the secure folder the answer is yes. Somebody asked this question a while back and I tested it. Needed to start from scratch versus the software not inside the secure folder.

Are you experiencing any specific issues?

I bought the app years ago when i was running a jb iPhone and now i was thinking about buying it for my android Phone and i was asking myself if i can use Cryptomator within Samsungs operating System (OneUi) in its so called SecureFolder (which can also decrypt/encrypt..)

The idea is to use double encryption as Cryptomator encrypts ans after that i close the SecureFolder which itseld also encrypts..

Ok.

So yes if you would like to protect the cryptomator software and files from prying eyes if they should get a hold of your phone you can certainly install cryptomator and add the Installation icon to the secure folder and then establish a vault from there.

I meant to place the vault (the secure folder) inside of OneUis SecureFolder, not the app icon of Cryptomator.

  • Open + Unlock SecureFolder (OneUi)
  • Go back to the HomeScreen, open Cryptomator and unlock the vault
  • Lock the vault
  • Go back to SecureFolder lock it and Close

Can someone test this out if you can place the vault inside the SecureFolder?

Here is the answer I believe you are interested in:

Yes, it is possible. You can create a “double encryption” setup by installing Cryptomator inside your Samsung Secure Folder.

Samsung’s Secure Folder (part of One UI) creates an isolated, encrypted “sandbox” on your device. When you install an app inside it, the app and its data are stored in a separate partition of your phone’s memory that is encrypted at rest and requires a separate password/biometric to access.

How to Set It Up

To create a local Cryptomator vault inside your Secure Folder, follow these steps:

* Add Cryptomator to Secure Folder:

* Open your Secure Folder.

* Tap the + (Plus) icon.

* Select Cryptomator from your list of apps to “Add” it (this creates a separate instance of the app inside the folder). Alternatively, you can download it directly from the Play Store within the Secure Folder.

* Create a Local Vault:

* Open the Cryptomator app from inside the Secure Folder.

* Tap the + button to create a new vault.

* Choose Local Storage as the location.

* Cryptomator will now guide you to select a directory. Because you are running the app inside the Secure Folder, the “Local Storage” it sees is the virtualized storage assigned to the Secure Folder, not your main phone storage.

* Set Your Password:

* Choose a strong password for the Cryptomator vault itself. This is your “second layer” of protection.

Why This Works (Double Encryption)

When you do this, your files are protected by two distinct layers of security:

| Security Layer | Protection Provided |

|—|—|

| Layer 1: Secure Folder | Encrypts the entire “sandbox” using Samsung Knox hardware-backed security. Requires a PIN/Password to even see the Cryptomator app. |

| Layer 2: Cryptomator | Encrypts individual files into a vault structure. Even if someone bypassed the Secure Folder, the files inside would remain gibberish without the Cryptomator password. |

Important Limitations

* Performance: Accessing files may be slightly slower because the phone has to decrypt the Secure Folder layer first, and then Cryptomator has to decrypt the specific file you are opening.

* Visibility: Files stored in a “Local Vault” inside the Secure Folder will not be visible to apps outside of the Secure Folder (like your standard Gallery or File Manager).

* Backup: Remember that “Local” means it is only on your phone. If you lose the phone or factory reset it, these files are gone unless you manually back up the encrypted vault folder to a cloud or PC.

2 Likes

Thank you very much. I bought the app for the 2nd time now (…) and tried it out as you explained and it worked.

There is a “confirm vault unlock via face unlock/face id” feature in the cryptomator settings, could you guys please add a equivalent fingerprint setting as “confirm vault unlock via fingerprint”?

@tobihagemann

If the device supports Face ID, it will show Face ID as an option. If the device supports Touch ID, it will show Touch ID as an option. I don’t think a device exists that supports both.

But I suppose we’re talking about Android? It’s pretty much the same there, but it’s primarily fingerprint with a face unlock option, see: Settings | Cryptomator Documentation

You are very welcome glad I could assist. :grinning_face::grinning_face: