Is there an Open Source app for Android and Linux that enables me to have an encrypted container on a USB drive?
So that I can enter a password when I connect the USB drive and then move files to the drive to store them encrypted.
Cryptomator should serve your purpose well
I always thought Cryptomator was only for cloud services.
So with the Cryptomator app, I can create an enrypted container on an USB stick?
And since Cryptomator is also available for Linux, I could decrypt the container on Linux?
veracrypt is better, yes; that’s what PG recommends afair.
Cryptomator is primarily a cloud solution, so while you can technically use it encrypt the disk drive it’s better to use veracrypt
Why don’t Cryptomator find my USB drive on Linux, though the drive is recognized by the OS?
Droidfs on android, compatible with gocryptfs on linux.
Claims to just be an encrypted overlay, but includes file viewers.
Latest release is 2024, but the author is still pushing commits.
For usb, theres a bug and a workaround until its fixed: Path issue in OTG USB drive (gocryptfs volume) · Issue #385 · hardcore-sushi/DroidFS · GitHub Theres one comment saying it doesn’t work on grapheneos. I’ve been using it on gos. If you are too, whatever it is may or may not affect your phone.
What is the advantage compared to Cryptomator?
I tend to use something more established because of more eyes looking on security
Maybe it’s a permissions issue?
Here are the permission’s:
Context
shared=network;ipc;
sockets=x11;
devices=all;
filesystems=home;host-etc:ro;xdg-run/org.keepassxc.KeePassXC.BrowserServer;xdg-run/app/org.keepassxc.KeePassXC;host;
Session Bus Policy
org.freedesktop.secrets=talk
org.freedesktop.Notifications=talk
org.ayatana=talk
org.kde.kwalletd5=talk
org.freedesktop.FileManager1=talk
org.freedesktop.Flatpak=talk
org.kde.StatusNotifierWatcher=talk
org.gnome.keyring=talk
org.gtk.vfs.*=talk
org.kde.kwalletd6=talk
Environment
PATH=/app/bin/:/usr/bin/
Cryptomator charges a license through in app purchase for android and ios. It could be great, but haven’t tried it.
Droidfs is free and open source. Worked for both a local hidden volume, and usb with the above workaround.
Don’t know how good gocryptfs or cryfs are. Gocryptfs had an audit in 2016 linked from their github, and cryfs was published for peer review in 2017.
Droidfs, gocryptfs, and cryfs are still currently worked on, but droidfs hasn’t released in 2 years. Last release of gocryptfs was 1 year ago, and cryfs 2 years. The devs of all three are still committing regularly, so I’m not worried about this.
There is EDS lite, a veracrypt app for android. But it was last updated 6 years ago, making it 5 years behind veracrypt itself. Couldn’t find an up to date open source app for veracrypt.
Look like way to much permissions
Yes, but what can I do about it?