Android encrypts the whole phone by default. That's real, and it's been mandatory on new devices since Android 10. What it doesn't do is give you a separate, more private space for specific files while the phone is unlocked and in your hand, which is a different problem. Here's what Android actually offers for that, and where it runs out.

What's Already On: Full-Disk Encryption

Every Android phone shipped with Android 10 or later has device encryption on from the first setup, using your lock screen PIN, pattern, or password as the key. It's automatic, free, and it does real work: a phone that's off, or hasn't been unlocked since restart, is unreadable without that credential.

The gap is what happens once the phone is unlocked, which is most of the time you're actually holding it. Full-disk encryption doesn't create a second, separate lock for specific files. Anyone who picks up an already-unlocked phone, or who has your PIN, sees everything the same way you do, the same blind spot covered in How to Encrypt a Folder on Mac and How to Encrypt a Folder on Windows for their platforms.

The Built-In Option: Safe Folder in Files by Google

For an actual separate, PIN-gated folder, the closest thing Android has built in is Safe Folder, part of the Files by Google app:

  1. Open the Files app (pre-installed on many phones; free from the Play Store otherwise).
  2. Open the menu and tap Safe Folder.
  3. Set a PIN, separate from your phone's own lock screen PIN.
  4. Move files in. They're moved, not copied, encrypted, and removed from your regular gallery and file browser.

This is genuine, on-device encryption behind its own unlock step, the same category of protection described in AES-256 Explained Simply. It's also free and requires no third-party app if Files by Google is already on your phone.

Where Safe Folder Runs Out

  • Tied to one app, one phone. Files in Safe Folder don't sync anywhere. Setting up a new phone means manually moving them back out first, then back in on the new device.
  • Not on every Android phone. It depends on Files by Google being installed and current; most phones have it, but manufacturer skins vary, and a few devices don't ship with it at all.
  • Different from Samsung's Secure Folder. Samsung phones have their own, separate Knox-backed Secure Folder, which isolates entire apps, not just files. The two aren't related, and don't assume one if you have the other. See our Samsung Secure Folder comparison for how that one holds up on its own.
  • No situational features. There's no equivalent to a decoy vault for a moment when showing something harmless matters more than refusing to unlock at all.
  • Recovery runs through your Google account, not a separate recovery phrase you control directly.

None of that makes Safe Folder bad. For a single Android phone, it's a real, free improvement over an unencrypted folder. It just doesn't travel, and it doesn't do anything beyond basic PIN-gating.

When a Dedicated Vault App Is Worth It Instead

A purpose-built vault app like Vaultine uses the same category of on-device AES-256 encryption but works the same way regardless of which phone, or which manufacturer's skin, it's running on: its own PIN separate from any phone lock screen or Google account, the same vault reachable on iPhone, Mac, and Windows too, and a Decoy Vault and Duress Vault for situations where being asked to unlock something is itself the risk.

The tradeoff is honest: if Files by Google is already on your phone, Safe Folder is free and already there for basic, single-device protection. For anything that needs to move between devices, or needs more than a plain PIN gate, a dedicated vault fills the gap.

The Short Version

Android encrypts the whole phone by default, and Safe Folder in Files by Google adds a genuine, free, PIN-gated folder on top of that. Both are real. Neither travels between devices, and neither offers anything beyond a single PIN, which is what a dedicated vault app actually adds.

Try the dedicated version, 10 files free, at vaultine.app.