โโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโ โโโโโโโโโโโโ โโโ โโโ โโโ โโโโโโ โโโ โโโโโโ โโโโโโโโโ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโโโโ โโโโโโ โโโโโโโโโ
โโโโโโโโ โโโ โโโโโโ โโโโโโโโโโโ โโโ โโโโโโโโ โโโ โโโโโโโโโโโโโโ โโโโโโ โโโ
โโโโโโโโ โโโ โโโโโโ โโโโโโโโโโโ โโโ โโโโโโโโ โโโโ โโโโโโโโโโโโโโโ โโโโโโ โโโ
โโโโโโโโ โโโ โโโโโโโโโโโ โโโโโโโโโโโโโโ โโโ โโโ โโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโโ
โโโโโโโโ โโโ โโโโโโโโโโโ โโโโโโโโโโโโโโ โโโ โโโ โโโโโ โโโ โโโ โโโโโโโ โโโโโโโโโโโ
Stealth Vault is disguised as a fully functional scientific calculator.
Enter the secret PIN and press=โ and a hardware-encrypted private vault opens.
Nobody will ever know what's hiding behind the numbers.
- โจ Overview
- ๐ Features
- ๐ ๏ธ Tech Stack
- ๐ Project Structure
- ๐ Getting Started
- ๐ก๏ธ Security Architecture
- โ๏ธ License
Stealth Vault is a multi-platform privacy ecosystem. On the surface, it's an elegant calculator app. Underneath, it's a hardened encrypted sandbox for your most sensitive files, photos, videos, and app data.
This monorepo contains two applications:
| Platform | Directory | Description |
|---|---|---|
| ๐ฑ Android | /app |
Native Kotlin app with hardware-backed AES-256 encryption, intruder detection, app locking, and a decoy PIN system |
| ๐ป Web | /web |
React + TypeScript companion โ same decoy calculator UI, auto-lock, glassmorphism design, and Framer Motion animations |
Looks and behaves exactly like a real scientific calculator.
| What it does | How |
|---|---|
| Full math expressions | exp4j (Android) / Function() eval (Web) |
| Scientific functions | sin, cos, log, โ, xยฒ, ฯ, e |
| Memory operations | MC, MR, M+, Mโ |
| Calculation history | Tap the clock icon to reveal past results |
| Swipe to delete | Swipe left/right on the display to backspace |
| Haptic feedback | Tactile response on every button press |
| Secret unlock trigger | Enter PIN โ press = โ vault opens silently |
Your files are invisible to the OS and encrypted at rest.
User PIN โโโบ Android KeyStore (HSM) โโโบ AES-256-GCM Key Derivation
โ
โผ
Encrypted Blob โโโ File / Photo / Video
(stored in app private dir โ invisible to file explorers)
- ๐ Keys are sealed in Android KeyStore โ never exposed to memory unless actively decrypting
- ๐๏ธ Vault metadata stored in Room DB + SQLCipher (database-level encryption)
- ๐ซ Vault files are stripped from Android Gallery and all OS scanners immediately on import
Lock any installed app. Confuse anyone who tries to open it.
- Runs as a background accessibility service, monitoring foreground app changes
- When a locked app is opened by an intruder, the screen is replaced with a convincing "Application has stopped" crash dialog
- You bypass the overlay with a secret gesture known only to you
| Feature | Description |
|---|---|
| ๐ธ Intruder Selfie | CameraX silently snaps a front photo on every wrong PIN |
| ๐ชค Decoy PIN | A second PIN that opens a clean, empty decoy vault |
| ๐ฅ Emergency Wipe | After 5 failed attempts, all vault data is permanently erased |
| โฑ๏ธ Auto-Lock (Web) | Web app locks after 3 minutes of inactivity |
|
|
Security-Vault/
โ
โโโ ๐ฑ app/ โ Android application
โ โโโ src/main/
โ โโโ java/com/stealthvault/app/
โ โ โโโ data/
โ โ โ โโโ local/ โ Room DB entities, DAOs, preferences
โ โ โ โโโ repository/ โ VaultRepository (file ops + encryption)
โ โ โ โโโ security/ โ AES-256-GCM crypto engine
โ โ โโโ di/ โ Hilt dependency injection modules
โ โ โโโ service/ โ App lock service, emergency wipe
โ โ โโโ ui/
โ โ โ โโโ fake/ โ Decoy Calculator Activity
โ โ โ โโโ lock/ โ PIN lock screen
โ โ โ โโโ vault/ โ Main vault fragments + ViewModel
โ โ โ โโโ settings/ โ Decoy PIN, wipe config, preferences
โ โ โโโ utils/ โ Sensor security, helpers
โ โโโ res/ โ Layouts, drawables, themes
โ
โโโ ๐ป web/ โ React + TS web companion
โ โโโ src/
โ โโโ components/
โ โ โโโ DecoyCalculator.tsx โ Full calculator UI + stealth trigger
โ โ โโโ Sidebar.tsx โ Vault navigation sidebar
โ โโโ hooks/
โ โ โโโ useAutoLock.ts โ Inactivity auto-lock hook
โ โโโ App.tsx โ Root app (lock/unlock state)
โ โโโ index.css โ HSL design tokens + glassmorphism
โ
โโโ โ๏ธ build.gradle.kts โ Root Gradle configuration
Requirements: Android Studio Jellyfish+, JDK 17, Android SDK 34+
# 1. Clone the repo
git clone https://github.com/Subhan-Haider/Security-Vault.git
# 2. Open in Android Studio โ File > Open โ select the repo root
# 3. Wait for Gradle sync to complete
# 4. Build the debug APK
./gradlew assembleDebug
# Output โ app/build/outputs/apk/debug/app-debug.apkRequirements: Node.js 18+, npm
# 1. Enter the web directory
cd web
# 2. Install dependencies
npm install
# 3. Launch the dev server
npm run dev
# 4. Open in browser
# http://localhost:5173
#
# Enter PIN: 1337 โ press = โ vault unlocksStealth Vault uses defense-in-depth โ multiple independent security layers:
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ LAYER 1 โ OBSCURITY โ
โ Calculator disguise, no visible vault UI โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
โ LAYER 2 โ ACCESS CONTROL โ
โ PIN verification, Decoy PIN, Auto-lock โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
โ LAYER 3 โ ENCRYPTION โ
โ AES-256-GCM keys inside Android KeyStore HSM โ
โ SQLCipher encrypted database โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
โ LAYER 4 โ ANTI-FORENSICS โ
โ Files hidden from OS, metadata stripped โ
โ Intruder selfie, Emergency wipe on 5 failures โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
ยฉ 2026 Subhan Haider โ All Rights Reserved
This project is released under a Custom Proprietary License.
| Restriction | |
|---|---|
| ๐ซ | No publishing to any app store (Google Play, Apple App Store, etc.) |
| ๐ซ | No redistribution or sharing with third parties |
| ๐ซ | No modification or creation of derivative works |
| ๐ซ | No commercial use of any kind |
| โ | Personal viewing and private study is permitted |
See the full LICENSE for details.
Built with ๐ by Subhan Haider