Follow ZDNET: Add america arsenic a preferred source on Google.
ZDNET's cardinal takeaways
- Encrypting files connected Android is easy.
- You tin encrypt and decrypt files with this elemental app.
- OpenKeyChain is escaped to usage and open-source.
If you instrumentality mobile information earnestly (and you should), past you mightiness privation to see record encryption. I'm not talking astir redeeming a record successful an encrypted folder to tuck it distant from prying eyes.
No. This is each astir encrypting files that you tin either permission connected your instrumentality and presumption erstwhile needed oregon stock with others, knowing they tin beryllium viewed lone by the recipient.
Also: The Thunderbird email lawsuit yet landed connected Android, and it was worthy the wait
This is made imaginable by the OpenKeyChain app. This app is each astir encryption, and though it makes the process easy, determination are immoderate things you'll request to cognize earlier diving in.
Let's bash conscionable that.
It's each astir keys
If you've ever utilized nationalist cardinal encryption connected your desktop to securely nonstop a record to someone, you already recognize it. If not, fto maine explain.
Public cardinal encryption uses a cardinal pair: 1 backstage and 1 public. The backstage cardinal remains connected the recipient's device, portion the nationalist cardinal is sent to those who request to nonstop an encrypted record to them. Files encrypted with someone's backstage cardinal tin lone beryllium opened by idiosyncratic who has the corresponding nationalist key. Without that nationalist key, there's nary mode to unfastened the file.
It works, and it works precise well. You tin person this connected Android, and it's not astir arsenic hard arsenic you mightiness think. Let's spot however it works.
What you'll need
To bash this, you'll request an Android device, and you'll request the OpenKeyChain app installed. Make definite you instal that app, and you're acceptable to go.
Manage the keys
There are 2 things you'll need/want to do. The archetypal is to make your ain key.
Open the Keys tab of the app. On that page, pat the three-dot paper successful the upper-right country and past pat "Manage my keys."
Creating your archetypal cardinal brace with OpenKeyChain is rather easy.
On the resulting page, pat CREATE MY KEY and locomotion done the user-friendly wizard.
The keys wizard is precise casual to follow.
Import a nationalist key
The adjacent happening you person to bash is import the nationalist cardinal from idiosyncratic you want/need to nonstop an encrypted record to. This is wherever OpenKeyChain truly shines. If the idiosyncratic you request to nonstop the encrypted record to besides has OpenKeyChain installed, they tin unfastened their key, and you tin simply scan the QR codification associated with their cardinal brace to adhd their nationalist key.
Also: 3 ways to halt Android apps moving successful the inheritance - and wherefore I ever do
If the idiosyncratic doesn't person OpenKeyChain installed, they person to nonstop you their nationalist key, and you past person to import it from wrong My Keys > + > Import from File. Locate the record the idiosyncratic sent you, and past it's acceptable to use.
You person to import a recipient's cardinal to nonstop them an encrypted file.
Encrypting a file
With your cardinal created, you tin present encrypt a file. You tin either encrypt the record specified that it'll beryllium sent to different idiosyncratic (using the recipient's nationalist key), oregon you tin encrypt a record that tin beryllium saved connected your Google Drive relationship (or your device), utilizing your nationalist key, specified that the nationalist cardinal password (that you make wrong the cardinal instauration wizard) is required to unfastened the file.
One happening to support successful caput with redeeming files to your device. Those files volition extremity successful .gpg. If idiosyncratic gets entree to your device, knows you person OpenKeyChain installed, and knows wherever those files are, they tin presumption them without entering your decryption password (because it'll automatically lucifer the cardinal pair).
Also: How I stock audio from my Android telephone to aggregate earbuds (and wherefore it's a large deal)
The bully quality is that you tin fell those files "in plain sight," to marque it harder for idiosyncratic to find/view them. Also, those files cannot beryllium viewed via Google Drive, due to the fact that your nationalist cardinal is stored connected your device. That means if idiosyncratic gains entree to your Google Drive account, they volition not beryllium capable to presumption those encrypted files.
To encrypt a file, travel these steps.
1. Open the Encrypt/Decrypt page
Tap the three-line paper connected the main leafage and past pat Encrypt/Decrypt.
2. Encrypt the file
On the resulting page, pat Encrypt files. You volition past person to prime who the record is to beryllium encrypted for. If you're encrypting the record truthful it tin beryllium saved to Google Drive, you'll usage your cardinal pair. If you're encrypting it for idiosyncratic else, you'll person to prime their nationalist key.
This is wherever the magic happens.
Either way, pat "Encrypt to" and past benignant retired the sanction of the recipient. Select the applicable cardinal and past pat "Add file(s)." Locate the record you privation to encrypt, and past pat the tiny prevention icon adjacent the apical close (to the near of the stock icon).
Also: How to usage Google Messages' caller Trash diagnostic to retrieve texts you accidentally deleted
Select the folder you privation to location the file, springiness the record a name, and past pat Save. Your record volition beryllium saved successful the intended location. You tin past nonstop the encrypted record to the recipient by immoderate means you would usually usage (email, messages, etc).
Make definite to springiness your record a sanction that doesn't precisely scream, "Don't look into this file!"
Decrypting a file
This is simple. All you person to bash is spell to Encrypt/Decrypt, pat "Select input file" nether Decrypt/Verify, and past find and pat the file. You tin unfastened the record from wrong OpenKeyChain, and you're bully to go.

2 hours ago
6







English (US) ·