Encryption gets mentioned by almost every privacy-focused app, but where it happens matters just as much as whether it happens. On-device encryption specifically means the encryption and decryption both take place on your phone — not on a remote server.

Why the location matters

If a file is encrypted on a server, the server necessarily had access to the unencrypted version at some point, and typically holds the key needed to decrypt it again later (otherwise it couldn't serve the file back to you). That means the company running the server is, in principle, capable of accessing your file, and a breach of their systems could expose it.

If a file is encrypted entirely on your device, using a key derived from something only you know — your PIN — the unencrypted file and the key needed to unlock it never leave your phone. There's nothing for a remote breach to expose, because there's no server-side copy or server-side key.

How this typically works in a vault app

  • You set a PIN, which is used locally to derive an encryption key — the PIN itself and the derived key both stay on your device.
  • When you add a file to the vault, it's encrypted using that key before being written to storage.
  • When you unlock the vault, the same key (re-derived from your PIN) decrypts files for viewing, still entirely on-device.
  • At no point does the file, in its unencrypted form, or the key itself, get transmitted anywhere.

Lockilee's Private Vault works this way — encryption keys are derived from your PIN on your device, and files are never uploaded to Lockilee's servers.

A simple way to check: if a vault app works fully offline for everyday viewing and organizing, that's a good sign the encryption and decryption genuinely happen on-device rather than requiring a round trip to a server.

Frequently Asked Questions

Is on-device encryption the same as end-to-end encryption?

They're related but not identical. End-to-end encryption usually describes data in transit between two parties. On-device encryption describes where encryption and decryption happen for stored files — on your device, rather than on a server.

Does on-device encryption slow down my phone?

Encrypting and decrypting individual files as you use them adds negligible overhead on modern phones — it's not a noticeable performance cost for typical vault use.

If encryption happens on-device, can the app's developer still see my files?

Not if the key is derived from something only you have (like your PIN) and never transmitted. Without the key, an encrypted file is unreadable, including to the app's own developer.

See on-device encryption in practice

Lockilee is free to start, with 10 slots across files and locked apps.

Get Lockilee Free