How to easily encrypt files on an Android phone - and the free app I use to do it

2 hours ago 6
openkeychainhero
Jack Wallen/ZDNET

Follow ZDNET: Add america arsenic a preferred source on Google.


ZDNET's cardinal takeaways

  • Encrypting files connected Android is easy.
  • You tin encrypt and decrypt files with this elemental app.
  • OpenKeyChain is escaped to usage and open-source.

If you instrumentality mobile information earnestly (and you should), past you mightiness privation to see record encryption. I'm not talking astir redeeming a record successful an encrypted folder to tuck it distant from prying eyes. 

No. This is each astir encrypting files that you tin either permission connected your instrumentality and presumption erstwhile needed oregon stock with others, knowing they tin beryllium viewed lone by the recipient.

Also: The Thunderbird email lawsuit yet landed connected Android, and it was worthy the wait

This is made imaginable by the OpenKeyChain app. This app is each astir encryption, and though it makes the process easy, determination are immoderate things you'll request to cognize earlier diving in.

Let's bash conscionable that.

It's each astir keys

If you've ever utilized nationalist cardinal encryption connected your desktop to securely nonstop a record to someone, you already recognize it. If not, fto maine explain.

Public cardinal encryption uses a cardinal pair: 1 backstage and 1 public. The backstage cardinal remains connected the recipient's device, portion the nationalist cardinal is sent to those who request to nonstop an encrypted record to them. Files encrypted with someone's backstage cardinal tin lone beryllium opened by idiosyncratic who has the corresponding nationalist key. Without that nationalist key, there's nary mode to unfastened the file.

It works, and it works precise well. You tin person this connected Android, and it's not astir arsenic hard arsenic you mightiness think. Let's spot however it works.

What you'll need

To bash this, you'll request an Android device, and you'll request the OpenKeyChain app installed. Make definite you instal that app, and you're acceptable to go.

Manage the keys

There are 2 things you'll need/want to do. The archetypal is to make your ain key.

Open the Keys tab of the app. On that page, pat the three-dot paper successful the upper-right country and past pat "Manage my keys."

Show more

OpenKeyChain

Creating your archetypal cardinal brace with OpenKeyChain is rather easy.

Jack Wallen/ZDNET

On the resulting page, pat CREATE MY KEY and locomotion done the user-friendly wizard.

Show more

OpenKeyChain

The keys wizard is precise casual to follow.

Jack Wallen/ZDNET

Import a nationalist key

The adjacent happening you person to bash is import the nationalist cardinal from idiosyncratic you want/need to nonstop an encrypted record to. This is wherever OpenKeyChain truly shines. If the idiosyncratic you request to nonstop the encrypted record to besides has OpenKeyChain installed, they tin unfastened their key, and you tin simply scan the QR codification associated with their cardinal brace to adhd their nationalist key. 

Also: 3 ways to halt Android apps moving successful the inheritance - and wherefore I ever do

If the idiosyncratic doesn't person OpenKeyChain installed, they person to nonstop you their nationalist key, and you past person to import it from wrong My Keys > + > Import from File. Locate the record the idiosyncratic sent you, and past it's acceptable to use.

OpenKeyChain

You person to import a recipient's cardinal to nonstop them an encrypted file.

Jack Wallen/ZDNET

Encrypting a file

With your cardinal created, you tin present encrypt a file. You tin either encrypt the record specified that it'll beryllium sent to different idiosyncratic (using the recipient's nationalist key), oregon you tin encrypt a record that tin beryllium saved connected your Google Drive relationship (or your device), utilizing your nationalist key, specified that the nationalist cardinal password (that you make wrong the cardinal instauration wizard) is required to unfastened the file.

One happening to support successful caput with redeeming files to your device. Those files volition extremity successful .gpg. If idiosyncratic gets entree to your device, knows you person OpenKeyChain installed, and knows wherever those files are, they tin presumption them without entering your decryption password (because it'll automatically lucifer the cardinal pair).

Also: How I stock audio from my Android telephone to aggregate earbuds (and wherefore it's a large deal)

The bully quality is that you tin fell those files "in plain sight," to marque it harder for idiosyncratic to find/view them. Also, those files cannot beryllium viewed via Google Drive, due to the fact that your nationalist cardinal is stored connected your device. That means if idiosyncratic gains entree to your Google Drive account, they volition not beryllium capable to presumption those encrypted files.

To encrypt a file, travel these steps.

1. Open the Encrypt/Decrypt page

Tap the three-line paper connected the main leafage and past pat Encrypt/Decrypt.

2. Encrypt the file

On the resulting page, pat Encrypt files. You volition past person to prime who the record is to beryllium encrypted for. If you're encrypting the record truthful it tin beryllium saved to Google Drive, you'll usage your cardinal pair. If you're encrypting it for idiosyncratic else, you'll person to prime their nationalist key.

OpenKeyChain

This is wherever the magic happens.

Jack Wallen/ZDNET

Either way, pat "Encrypt to" and past benignant retired the sanction of the recipient. Select the applicable cardinal and past pat "Add file(s)." Locate the record you privation to encrypt, and past pat the tiny prevention icon adjacent the apical close (to the near of the stock icon). 

Also: How to usage Google Messages' caller Trash diagnostic to retrieve texts you accidentally deleted

Select the folder you privation to location the file, springiness the record a name, and past pat Save. Your record volition beryllium saved successful the intended location. You tin past nonstop the encrypted record to the recipient by immoderate means you would usually usage (email, messages, etc).

OpenKeyChain

Make definite to springiness your record a sanction that doesn't precisely scream, "Don't look into this file!"

Jack Wallen/ZDNET

Decrypting a file

This is simple. All you person to bash is spell to Encrypt/Decrypt, pat "Select input file" nether Decrypt/Verify, and past find and pat the file. You tin unfastened the record from wrong OpenKeyChain, and you're bully to go.

Read Entire Article