# Backup Container on USB drive?

**URL:** https://discuss.privacyguides.net/t/backup-container-on-usb-drive/36901
**Category:** Questions
**Tags:** please-eli5
**Created:** 2026-04-06T14:58:03Z
**Posts:** 15

## Post 1 by @Kabo — 2026-04-06T14:58:03Z

Is there an Open Source app for Android and Linux that enables me to have an encrypted container on a USB drive?

So that I can enter a password when I connect the USB drive and then move files to the drive to store them encrypted.

---

## Post 2 by @PrivNat — 2026-04-06T23:00:24Z

Cryptomator should serve your purpose well

---

## Post 3 by @Kabo — 2026-04-07T19:07:56Z

I always thought Cryptomator was only for cloud services.

So with the Cryptomator app, I can create an enrypted container on an USB stick?  
And since Cryptomator is also available for Linux, I could decrypt the container on Linux?

---

## Post 4 by @Colter — 2026-04-09T12:30:36Z

> **[Is Cryptomator suitable to encrypt a whole external hard drive?](https://www.reddit.com/r/Cryptomator/comments/108c0t3/is_cryptomator_suitable_to_encrypt_a_whole/)**
>
> The idea would be to create a vault in the drive and basically only transfer files to the vault. So the vault could end up holding like 1-2tb. 
> 
> Would there be any issues doing that?  
> 
> Thanks.

---

## Post 5 by @Dellsam1 — 2026-04-09T22:23:08Z

veracrypt is better, yes; that’s what PG recommends afair.

Cryptomator is primarily a cloud solution, so while you can technically use it encrypt the disk drive it’s better to use veracrypt

---

## Post 6 by @Kabo — 2026-04-10T00:54:29Z

> [@PrivNat](#):
>
> Cryptomator should serve your purpose well

@PrivNat @Colter

Why don’t Cryptomator find my USB drive on Linux, though the drive is recognized by the OS?

---

## Post 7 by @winteranimal — 2026-04-10T02:07:20Z

Droidfs on android, compatible with gocryptfs on linux.

Claims to just be an encrypted overlay, but includes file viewers.

Latest release is 2024, but the author is still pushing commits.

For usb, theres a bug and a workaround until its fixed: [Path issue in OTG USB drive (gocryptfs volume) · Issue #385 · hardcore-sushi/DroidFS · GitHub](https://github.com/hardcore-sushi/DroidFS/issues/385) Theres one comment saying it doesn’t work on grapheneos. I’ve been using it on gos. If you are too, whatever it is may or may not affect your phone.

---

## Post 8 by @Kabo — 2026-04-11T18:35:42Z

> [@winteranimal](#):
>
> Droidfs on android, compatible with gocryptfs on linux.
> 
> Claims to just be an encrypted overlay, but includes file viewers.
> 
> Latest release is 2024, but the author is still pushing commits.

What is the advantage compared to Cryptomator?

I tend to use something more established because of more eyes looking on security

---

## Post 9 by @Colter — 2026-04-12T14:46:01Z

> [@Kabo](#):
>
> Why don’t Cryptomator find my USB drive on Linux, though the drive is recognized by the OS?

Maybe it’s a permissions issue?

---

## Post 10 by @Kabo — 2026-04-12T19:27:24Z

> [@Colter](#):
>
> Maybe it’s a permissions issue?

Here are the permission’s:

Context

shared=network;ipc;  
sockets=x11;  
devices=all;  
filesystems=home;host-etc:ro;xdg-run/org.keepassxc.KeePassXC.BrowserServer;xdg-run/app/org.keepassxc.KeePassXC;host;

Session Bus Policy

org.freedesktop.secrets=talk  
org.freedesktop.Notifications=talk  
org.ayatana=talk  
org.kde.kwalletd5=talk  
org.freedesktop.FileManager1=talk  
org.freedesktop.Flatpak=talk  
org.kde.StatusNotifierWatcher=talk  
org.gnome.keyring=talk  
org.gtk.vfs.\*=talk  
org.kde.kwalletd6=talk

Environment

PATH=/app/bin/:/usr/bin/

---

## Post 11 by @winteranimal — 2026-04-12T23:14:34Z

Cryptomator charges a license through in app purchase for android and ios. It could be great, but haven’t tried it.

Droidfs is free and open source. Worked for both a local hidden volume, and usb with the above workaround.

Don’t know how good gocryptfs or cryfs are. Gocryptfs had an audit in 2016 linked from their github, and cryfs was published for peer review in 2017.

Droidfs, gocryptfs, and cryfs are still currently worked on, but droidfs hasn’t released in 2 years. Last release of gocryptfs was 1 year ago, and cryfs 2 years. The devs of all three are still committing regularly, so I’m not worried about this.

There is EDS lite, a veracrypt app for android. But it was last updated 6 years ago, making it 5 years behind veracrypt itself. Couldn’t find an up to date open source app for veracrypt.

---

## Post 12 by @Libre_Software_Enjoyer — 2026-04-13T21:06:11Z

> [@Kabo](#):
>
> Here are the permission’s:
> 
> Context
> 
> shared=network;ipc;  
> sockets=x11;  
> devices=all;  
> filesystems=home;host-etc:ro;xdg-run/org.keepassxc.KeePassXC.BrowserServer;xdg-run/app/org.keepassxc.KeePassXC;host;
> 
> Session Bus Policy
> 
> org.freedesktop.secrets=talk  
> org.freedesktop.Notifications=talk  
> org.ayatana=talk  
> org.kde.kwalletd5=talk  
> org.freedesktop.FileManager1=talk  
> org.freedesktop.Flatpak=talk  
> org.kde.StatusNotifierWatcher=talk  
> org.gnome.keyring=talk  
> org.gtk.vfs.\*=talk  
> org.kde.kwalletd6=talk
> 
> Environment
> 
> PATH=/app/bin/:/usr/bin/

Look like way to much permissions

---

## Post 13 by @Kabo — 2026-04-18T16:47:33Z

> [@Libre_Software_Enjoyer](#):
>
> Look like way to much permissions

Yes, but what can I do about it?

---

## Post 14 by @Davian — 2026-06-01T15:41:29Z

> [@winteranimal](#):
>
> Droidfs on android, compatible with gocryptfs on linux.
> 
> Claims to just be an encrypted overlay, but includes file viewers.
> 
> Latest release is 2024, but the author is still pushing commits.
> 
> For usb, theres a bug and a workaround until its fixed: [Path issue in OTG USB drive (gocryptfs volume) · Issue #385 · hardcore-sushi/DroidFS · GitHub](https://github.com/hardcore-sushi/DroidFS/issues/385) Theres one comment saying it doesn’t work on grapheneos. I’ve been using it on gos. If you are too, whatever it is may or may not affect your phone.

Is [androidcrypt | F-Droid - Free and Open Source Android App Repository](https://f-droid.org/en/packages/com.androidcrypt/) good?

---

## Post 15 by @winteranimal — 2026-06-04T04:54:05Z

Its at least current. Would have to take a closer look. They’re looking for testers, so I wouldn’t use it now unless you want to help with that.
