New Create vaults as ext4 — Vaults can now be formatted as ext4, alongside FAT and exFAT, from the format step when you create one. ext4 does away with FAT's limits - there is no cap on how many files a folder holds, and it fragments far less as a vault fills - and it is a real Linux filesystem, so a vault made here mounts read-write on a Linux desktop with the standard tools, and an ext4 container made on a desktop opens here. It is not readable on Windows or macOS without a separate ext4 driver, so pick ext4 if you work on Linux or stay on the phone, and keep FAT or exFAT for the widest desktop reach. The ext4 support is a clean-room implementation written from the published on-disk format, carrying no third-party filesystem code. (#7) Generate keyfiles in the app — Keyfiles can now be created inside Arcanum instead of having to bring your own file. Pick Generate keyfile from the + button on the vault list for the full options - how many, what size, and extra randomness collected from your touch - or use Generate new keyfile right in the keyfile step while creating a vault or changing its keyfiles. Files are filled with cryptographically secure random data and stay interchangeable with desktop VeraCrypt. A keyfile is only its exact bytes, so back it up like a password: lose it and the vault is gone. (#110) Donations — Support the project in Settings now opens a screen of its own, with GitHub Sponsors and Ko-fi alongside addresses for Bitcoin, Lightning, Ethereum, Monero and Solana - tap one to copy it. Nothing is sent anywhere: the app has no network access, so a payment is always finished in your own wallet or browser. (#66) Fullscreen video — A video wider than it is tall now has a fullscreen button in its own corner. Tapping it turns the screen so the video fills it, carrying on from the same moment, and the way back sits next to the timecode. Videos shot upright already fill the screen, so they do not offer it. Double-tap seeking got tidier too: the -10s and +10s markers now appear over the video rather than below it, a double tap no longer pulls the controls up when they are hidden, and it keeps them up when they are not. Improvements Save the last mount log for bug reports — Debug mode can now keep the log of the most recent mount so it can be shared when something goes wrong. Turn on Save last mount log in Settings > Debug, reproduce the mount, then copy the saved log from the same screen. Previously the mount log was visible only live during mounting and could not be captured. Rename folders, not just files — Folders can now be renamed: the same menu that files have is available on folder rows, with Rename and Properties. Previously there was no way to rename a folder at all, which is what led to the move-and-lose-it problem above. A folder with a dot in its name, such as photos.2026, is also handled correctly now - the full name is shown when renaming, and nothing is appended afterwards. (#113) Rename and Properties from the grid layout — The grid layout offered no actions on individual items, so renaming was possible only in the list layout. Press and hold an item to select it and Rename and Properties now appear at the top, in either layout. Interface polish — Progress and completion screens now look and behave the same everywhere - a few of them were missing their animation or their haptic entirely, which made a long operation look like a stalled one. What's New groups entries by kind, new features first and fixes last, rather than listing them in the order they happened to be written. And the password steps no longer leave an empty band of background sitting above the keyboard. Video thumbnails that actually show something — A video's thumbnail was always its very first frame, so anything opening on black, on a white slate, or on a plain title card showed up in the gallery as an empty square - and every such video looked identical. Arcanum now uses the cover image stored in the file when there is one, and otherwise checks whether the first frame is a solid fill and reaches a little further into the video when it is. Videos that already had a usable first frame keep it. Existing thumbnails are regenerated once, the next time you open the gallery. (#111) Open a file in another app without decrypting it to disk — Open with is now an item in each file's menu, and it no longer works by writing a decrypted copy into the cache first. The other app is handed the file straight out of the mounted vault instead, so nothing plaintext ever reaches storage, and a large video opens immediately rather than after a long wait - it used to be read into memory in full, which could fail outright on a big file. Because this route exposes the vault to the other app, it asks first if External app access is off for that vault, and you can turn it back off in the vault's settings. Any decrypted copies left behind by the old version are wiped the next time you open a vault. (#103) Expand Volume has been removed — Expanding grew the encrypted container but not the filesystem inside it, and neither Arcanum nor desktop VeraCrypt can grow a FAT or exFAT filesystem - VeraCrypt warns about exactly this before expanding, and only finishes the job for NTFS, which Arcanum does not use. The added space was therefore never usable on the phone, so the action has been withdrawn rather than left looking like it worked. To get more room, create a larger vault and move your files into it, or expand the container on a desktop and extend the filesystem there. Vaults expanded by an earlier version are unaffected and keep working. Smoother playback progress — The video seek bar and the audio waveform advanced in five visible steps a second, because that is how often playback position was sampled. Both now move continuously. Album art for music files — Music files in the file browser now show their embedded cover art instead of a generic icon, in both the list and grid layouts. Tracks without artwork keep the icon. Opus files are also counted as music on the Storage screen now, rather than as ordinary files. Music files are marked as music — A track showing its cover art now carries a small note over it, the way a video carries a play triangle, so artwork is not mistaken for a photo at a glance. Security Hardened biometric app unlock — The fingerprint prompt that unlocks the app is now tied to a hardware-backed Keystore operation, so only a genuine biometric match can pass it. Before, the unlock relied on the prompt's success signal alone, which on a rooted or instrumented device could be driven directly to reveal the vault list (each vault stayed separately encrypted, so no vault contents were exposed). App unlock now works the same way per-vault unlock already did. (#89) Keyfiles never touch storage any more — Whenever you used a keyfile - creating a vault, changing a password or keyfile, backing up or restoring a header, expanding a vault - Arcanum first copied it into its own cache folder unencrypted, and relied on deleting it afterwards. That copy is gone: keyfiles are now read straight into memory, used, and wiped, exactly as they already were when mounting. Unlocking a vault was never affected. (#116) Fixes Correct location for vaults added from the Downloads or Videos picker — Adding an existing vault while the file picker was showing Downloads, Videos, or any section other than the device's own storage showed a meaningless location like Internal/1000000123 instead of the real folder. The vault's location now resolves correctly no matter which picker section you chose the file from. Open FAT32 vaults created by other apps — Some apps (for example AndroidCrypt) format small containers as FAT32 even when they hold too few clusters to qualify as FAT32 under the spec. Arcanum's bundled filesystem rejected these with a mount failure, even though the password was correct and the same vault opened fine in desktop VeraCrypt. Arcanum now honors the on-disk FAT32 layout and mounts these vaults. Clear message when a storage location is read-only — Some storage providers, such as certain network or SMB shares, let an app read a vault file but not write to it. Mounting such a vault read-write failed with a generic error. Arcanum now recognizes this and shows a clear message that the location is read-only and to mount it read-only instead, rather than an unhelpful failure, and read-only mounts of the same vaults keep working. No crash playing media on 32-bit devices — On 32-bit ARM devices, playing an audio or video file from a vault could crash the app. Decryption performed unaligned 64-bit memory accesses that 32-bit CPUs reject, triggered when playback read from a position that was not sector-aligned. Reads are now aligned before decryption, so media plays without crashing. (#92) Keyfile vaults with very long passwords now match VeraCrypt — When a keyfile was combined with a password longer than 64 bytes, Arcanum mixed them differently than VeraCrypt does. A vault created here that way could not be opened in desktop VeraCrypt, and VeraCrypt vaults created that way could not be opened here. The limit counts bytes rather than characters, so a password in a non-Latin alphabet crossed it at around 33 characters. Arcanum now matches VeraCrypt exactly. Vaults made by earlier versions still open - Arcanum detects the old format and retries automatically - and changing the password, or backing up, restoring or expanding such a vault, rewrites it in the correct format. Note that vaults created from now on with a keyfile and a password this long will not open in Arcanum versions older than this one. (#112) Moving a file or folder to where it already is no longer deletes it — Selecting Move on an item and then pasting it into the same folder made it disappear. Arcanum copied the item onto itself and then removed the original, so nothing was left. Pasting an item into the folder it already sits in now simply does nothing, and pasting a folder into itself or into one of its own subfolders is refused instead of destroying it. Copying an item into its own folder now makes a numbered duplicate, the way other file managers do. (#113) Import errors now say what actually went wrong — Every failed import claimed "Not enough space in the vault" no matter the cause, and a vault that genuinely was full was not even recognised as such - so the one problem the message named was the one it could never detect. Imports now report the real reason. One case worth knowing about: the top level of a vault formatted as FAT can hold a limited number of entries, fixed when the vault is created, and long filenames use up several each - so it can fill up after a hundred or so files while the vault itself is nearly empty. Arcanum now says so and points you at a subfolder, which has no such limit. Apps writing into a mounted vault from outside also get a proper out-of-space error instead of a generic failure. (#114) New vaults hold far more files at the top level — Vaults were being formatted in a way that capped the top level at a few hundred files, no matter how much room was left inside - after that, importing failed however small the file was. New vaults are now formatted the way desktop VeraCrypt does it, so the top level grows as needed and that limit is gone. Space is used more efficiently too: small files waste much less room than before. This applies to vaults created from now on. Existing vaults keep the old layout, so if you have hit the limit in one, moving files into subfolders will get you going again, or recreate the vault to be rid of it. (#115) Storage no longer shows free space that isn't there — The Storage screen took a vault's size from the volume header rather than from the filesystem inside it. Those are the same number until a vault is expanded, after which the header grows but the filesystem does not - so an expanded vault could report gigabytes free while refusing to accept a single file. Sizes now come from the filesystem, and where a vault's volume is larger than the filesystem in it, the screen says so instead of leaving two screens quietly disagreeing. Clean icons in the storage chart — The icons drifting through the ring on a vault's Storage screen were drawn with visible streaks and distortion, and some came out looking nothing like the icon they were meant to be. They are now drawn from a single crisp copy of each icon, and they are also kept clear of the edges of their slice, so a thin slice no longer trims them down to a sliver. Runs on devices with 16 KB memory pages — The encrypted-database library shipped with Arcanum was built for 4 KB memory pages. On a device using the 16 KB page size that newer Android versions support, it could not be loaded at all, and the app died on startup as soon as it touched its database. It has been replaced with a build that handles both. Your data is untouched - the database format is identical and existing vaults open as before. (#45) Storage figures keep up with changes — The Storage screen worked its numbers out once and then held them, so importing or deleting files left it showing the old breakdown until the vault was unmounted and mounted again. It now updates as files change, and recounts whenever the tab is opened. 翻译由deepseek提供 新功能 · 创建 ext4 格式的保险库 — 现在在创建保险库的格式化步骤中，除了 FAT 和 exFAT，您还可以选择将保险库格式化为 ext4。ext4 突破了 FAT 的限制——文件夹内文件数量无上限，随着保险库容量增大，文件碎片化程度远低于 FAT；而且它是真正的 Linux 文件系统，因此在此创建的保险库可以在 Linux 桌面端使用标准工具挂载为读写模式，在桌面端创建的 ext4 容器也可以在此打开。但 Windows 或 macOS 上若无额外 ext4 驱动则无法读取，因此如果您使用 Linux 或仅在本机操作，请选择 ext4；若需要在桌面端获得最广泛的兼容性，请保留 FAT 或 exFAT。ext4 支持是基于已发布的磁盘格式规范、完全独立开发的实现，不包含任何第三方文件系统代码。（#7） · 在应用内生成密钥文件 — 现在您无需自备密钥文件，可直接在 Arcanum 内创建密钥文件。在保险库列表界面点击“+”按钮，选择“生成密钥文件”，即可设置数量、大小，并可通过触摸收集额外随机数；在创建保险库或修改密钥文件时，也可直接在密钥文件步骤中使用“生成新密钥文件”。文件内容由加密安全随机数填充，并与桌面版 VeraCrypt 完全互换。密钥文件就是其精确字节内容，请像密码一样备份——丢失则保险库无法恢复。（#110） · 捐赠 — “设置”中的“支持项目”现在打开独立页面，包含 GitHub Sponsors 和 Ko-fi 链接，以及比特币、闪电网络、以太坊、门罗币和 Solana 的地址——点击即可复制。应用不会向任何地方发送数据：本应用无网络权限，支付操作始终在您自己的钱包或浏览器中完成。（#66） · 全屏视频 — 宽高比大于 1 的视频现在在其角落显示全屏按钮。点击后屏幕会旋转，视频填满屏幕，并从中断处继续播放；返回按钮位于时间码旁边。竖屏拍摄的视频已占满屏幕，因此不提供此按钮。双击快进/快退也得到优化：-10s 和 +10s 标记现在显示在视频上方而非下方；双击在控制条隐藏时不再唤出控制条，在控制条可见时则保持显示。 改进 · 为错误报告保存最近一次挂载日志 — 调试模式现在可以保留最近一次挂载的日志，以便在出问题时分享。在“设置 > 调试”中开启“保存最近挂载日志”，重现挂载问题后，即可从同一屏幕复制已保存的日志。此前挂载日志只能在挂载过程中实时查看，无法捕获。 · 重命名文件夹，而不仅是文件 — 文件夹现在也可以重命名：文件夹行上现在提供与文件相同的菜单，包含“重命名”和“属性”。此前完全无法重命名文件夹，这也是导致“移动后丢失”问题的根源。包含点号（如 photos.2026）的文件夹名称现在也能正确处理——重命名时显示完整名称，且不会附加任何额外内容。（#113） · 网格布局中的重命名和属性 — 网格布局此前无法对单个项目执行操作，因此重命名仅在列表布局中可用。现在长按任意项目即可选中，顶部会出现“重命名”和“属性”按钮，两种布局皆可使用。 · 界面细节打磨 — 进度和完成界面现在在所有场景下外观和行为一致——此前部分界面缺少动画或触感反馈，导致长时间操作看起来像卡住了。“新内容”页面现在按类型分组，新功能在前，修复在后，而非按编写顺序罗列。密码输入步骤不再在键盘上方留出多余的空白条。 · 视频缩略图真正显示有效内容 — 视频缩略图此前始终取第一帧，因此若视频以黑屏、白板或纯标题卡片开头，图库中就会显示空白方块，而且所有此类视频看起来一模一样。Arcanum 现在优先使用文件中存储的封面图；若没有封面图，则检测第一帧是否为纯色填充，并适当向后读取几帧。已拥有有效第一帧的视频保持不变。现有缩略图将在您下次打开图库时自动重新生成一次。（#111） · 在其他应用中打开文件，无需先解密到磁盘 — “打开方式”现在位于每个文件的菜单中，且不再通过先将解密副本写入缓存来实现。其他应用将直接从已挂载的保险库中获得该文件，因此明文数据永远不会落入存储设备；大视频文件也能立即打开，无需长时间等待——此前需要完整读入内存，大文件可能直接失败。由于此方式会将保险库内容暴露给其他应用，若该保险库的“外部应用访问”处于关闭状态，则操作前会询问您；您也可以在保险库设置中重新关闭此权限。旧版本遗留的解密副本将在下次打开保险库时被清除。（#103） · 移除“扩展卷”功能 — “扩展卷”会增加加密容器的大小，但不会扩展其中的文件系统，而 Arcanum 和桌面 VeraCrypt 均无法扩展 FAT 或 exFAT 文件系统——VeraCrypt 在扩展前会明确警告，且仅对 NTFS 完成扩展，而 Arcanum 不使用 NTFS。因此增加的空间在手机上始终无法使用，所以此功能已被移除，以免看似有效实则无用。如需更多空间，请创建更大的保险库并将文件移入，或在桌面端扩展容器并在那里扩展文件系统。此前已扩展的保险库不受影响，仍可正常使用。 · 更流畅的播放进度 — 视频进度条和音频波形图此前每秒仅更新五次，因为播放位置采样频率如此。现在两者均连续平滑移动。 · 音乐文件的专辑封面 — 文件浏览器中的音乐文件现在在列表和网格布局中均显示内嵌的封面图，而非通用图标。无封面图的音轨保留图标。Opus 文件现在在“存储”界面中也计入音乐文件，而非普通文件。 · 音乐文件被标记为音乐 — 显示封面的音轨现在会带有一个小标记，类似视频上的播放三角，以免将封面误认为照片。 安全 · 强化生物识别应用解锁 — 用于解锁应用的指纹提示现在绑定到硬件级 Keystore 操作，因此只有真正的生物识别匹配才能通过。此前解锁仅依赖提示的成功信号，在已 root 或被注入的设备上可能被直接驱动以显示保险库列表（但每个保险库仍独立加密，因此保险库内容不会暴露）。现在应用解锁方式与各保险库的解锁方式相同。（#89） · 密钥文件不再触及存储 — 此前每次使用密钥文件（创建保险库、修改密码或密钥文件、备份或恢复头部、扩展保险库）时，Arcanum 都会先将密钥文件未加密地复制到自己的缓存目录，然后依赖删除操作来清除。现在此副本已去除：密钥文件直接读入内存，使用后立即擦除，与挂载时的处理方式完全一致。解锁保险库从未受影响。（#116） 修复 · 修正从“下载”或“视频”选择器添加保险库时的位置显示 — 当文件选择器显示“下载”、“视频”或除设备自身存储以外的其他分类时，添加现有保险库会显示类似 Internal/1000000123 的无意义位置，而非真实文件夹。现在无论从哪个选择器分类选择文件，保险库位置均能正确解析。 · 打开由其他应用创建的 FAT32 保险库 — 某些应用（如 AndroidCrypt）即使容器簇数量不符合 FAT32 规范，也会将小容器格式化为 FAT32。Arcanum 自带的文件系统会因密码正确但挂载失败而拒绝这些容器，尽管同一保险库在桌面 VeraCrypt 中打开正常。现在 Arcanum 遵循磁盘上的 FAT32 布局，能够挂载这些保险库。 · 存储位置为只读时给出明确提示 — 某些存储提供者（如网络或 SMB 共享）允许应用读取保险库文件但不允许写入。以读写模式挂载此类保险库会报出通用错误。现在 Arcanum 能识别此情况，并明确提示该位置为只读，建议以只读方式挂载，而非无意义的失败信息；同时这些保险库的只读挂载仍可正常工作。 · 修复 32 位设备上播放媒体崩溃 — 在 32 位 ARM 设备上，从保险库播放音视频文件可能导致应用崩溃。解密过程执行了未对齐的 64 位内存访问，而 32 位 CPU 不支持，当播放从非扇区对齐的位置读取时触发。现在读取前会进行对齐处理，因此媒体播放不再崩溃。（#92） · 同时使用密钥文件和超长密码的保险库现在与 VeraCrypt 一致 — 当密钥文件与长度超过 64 字节的密码组合时，Arcanum 此前混合方式与 VeraCrypt 不同。在此创建的此类保险库无法在桌面 VeraCrypt 中打开，反之亦然。限制按字节计，因此非拉丁字母密码大约在 33 个字符时即超限。现在 Arcanum 与 VeraCrypt 完全匹配。早期版本创建的此类保险库仍可打开——Arcanum 能检测旧格式并自动重试；修改密码、备份、恢复或扩展此类保险库时，会将其重写为正确格式。请注意，从此版本开始创建的包含密钥文件和超长密码的保险库，将无法在更早版本的 Arcanum 中打开。（#112） · 将文件或文件夹移动到自身所在位置不再删除它 — 选中某个项目后选择“移动”，然后粘贴到同一文件夹中，会导致该项目消失。因为 Arcanum 将项目复制到自身后删除了原件，结果什么都没留下。现在将项目粘贴到其自身所在的文件夹时，操作会被忽略；将文件夹粘贴到自身或其子文件夹内时，会被拒绝，以免造成数据丢失。将项目复制到自身所在文件夹时，现在会生成带编号的副本，与其他文件管理器一致。（#113） · 导入错误现在报告真正的原因 — 此前所有导入失败都显示“保险库空间不足”，即使真正原因是其他问题；而且真正空间不足时也无法识别，因此唯一提到的问题却恰恰无法被检测到。现在导入会报告真实原因。其中一个值得注意的情况：FAT 格式保险库的根目录条目数在创建时即固定，长文件名会占用多个条目，因此在保险库本身几乎空余的情况下，根目录可能在存放约一百个文件后即被填满。现在 Arcanum 会明确提示此情况，并建议您使用子文件夹（子文件夹无此限制）。从外部向已挂载保险库写入数据的应用现在也能收到正确的空间不足错误，而非通用失败。（#114） · 新建保险库根目录可容纳更多文件 — 此前保险库格式化方式导致根目录最多只能存放几百个文件，无论剩余空间多大——之后即使文件很小也无法导入。现在新建保险库采用与桌面 VeraCrypt 相同的格式化方式，根目录可按需扩展，该限制已取消。同时空间利用更高效：小文件浪费的空间大大减少。此改进仅适用于此后新建的保险库。现有保险库保留旧布局，若您已遇到根目录限制，可将文件移入子文件夹继续使用，或重新创建保险库以彻底消除该限制。（#115） · “存储”界面不再显示不存在的剩余空间 — “存储”界面此前从卷头部获取保险库大小，而非从内部文件系统获取。两者在扩展前相同，但扩展后头部增大而文件系统不变——因此扩展后的保险库可能报告数 GB 剩余空间，却无法接受任何文件。现在大小信息来自文件系统；若卷容量大于内部文件系统容量，界面会明确说明，而不是让两个页面悄悄不一致。 · 存储图表中的图标更清晰 — 保险库“存储”界面环形图中飘动的图标此前绘制时有条纹和变形，有些图标完全走样。现在每个图标都从单一清晰副本绘制，并且会避开扇区边缘，因此即使薄扇区也不会将图标裁剪成细条。 · 在具有 16 KB 内存页的设备上运行 — Arcanum 附带的加密数据库库此前为 4 KB 内存页构建。在支持新版 Android 的 16 KB 页大小的设备上，该库无法加载，应用在启动后访问数据库时即崩溃。现已替换为同时支持两种页大小的构建版本。您的数据不受影响——数据库格式相同，现有保险库可照常打开。（#45） · 存储数据随变化实时更新 — “存储”界面此前只计算一次并保持不变，因此导入或删除文件后，其分类统计仍保持旧状态，直到重新挂载保险库。现在它会在文件变动时更新，并在每次打开该标签页时重新统计。

兼容 VeraCrypt 的加密容器管理器 Arcanum 是一款适用于 Android 的加密容器管理器，可创建并挂载兼容 VeraCrypt 的卷。您的文件受到军用级加密保护，仅您本人能够访问。 主要功能 • 兼容 VeraCrypt —— 容器在桌面端（Windows、macOS、Linux）同样适用 • 支持 AES-256、Twofish、Serpent 及级联加密算法 • 多种哈希算法：SHA-512、SHA-256、Whirlpool、Streebog、BLAKE2s-256 • 隐藏卷，实现合理否认 • 支持密钥文件 • 生物识别解锁（指纹/面部） 隐私与安全 • 伪装模式 — 应用在主屏幕上显示为普通计算器 • 紧急 PIN 码 — 立即清除敏感数据并重置应用 • 应用进入后台时自动锁定 • 采用 Argon2id 密钥派生算法的 PIN 码保护 • 无网络访问、无分析、无遥测 • 所有数据均保存在您的设备上 开源 Arcanum 完全开源。其加密实现基于 VeraCrypt 代码库。您可以自行审查、审计并构建该应用。 这是 F-Droid 版本：包含所有功能，无需付费。