XSILENT · PUBLIC SECURITY OVERVIEW
Xsilent Security Architecture
A public, high-level explanation of how Xsilent approaches local privacy, access control, encrypted storage, backup and network behavior without exposing implementation details that could weaken users' security.
Local-first by design
Private vault content is kept under local device control and is not automatically uploaded to TSI Dev Studio servers. Xsilent needs no product account, shows no ads and does not make cloud storage mandatory. Internet access may still be used for Google Play installation, updates, purchasing and purchase restoration.
Encrypted storage and access
Imported private content is protected locally with authenticated AES-GCM encryption. The Master PIN is the primary access method, while supported device biometrics can be enabled as an optional convenience. Quick Lock and automatic locking help end an active session deliberately.
User-controlled backup and recovery
An encrypted backup is created only when the user requests it. The user chooses its destination through Android and protects it with a separate password. Xsilent cannot recover a forgotten Master PIN or backup password.
Private files, PDFs and Trash
Photos, videos and supported PDFs can remain in the private environment. PDFs can be viewed there without being treated as ordinary gallery content. Deleted items may remain protected in encrypted Trash for the configured 7- or 30-day period before automatic deletion.
Clean Share
Clean Share prepares a separate copy for sharing. It can blur sensitive areas and remove metadata while leaving the encrypted original unchanged. The user decides whether and where that prepared copy is shared.
What remains on-device
Vault content, local preferences and the information needed to organize the private space remain on the device in normal use. The user controls imports, exports, deletion and optional backup creation.
What Xsilent does not claim
- No application can guarantee absolute protection on a rooted, compromised or physically controlled device.
- Operating-system vulnerabilities, insecure exported copies, weak device security and user actions can affect privacy.
- A person can still photograph a screen with another camera, and lost credentials cannot be recovered by TSI Dev Studio.
- Xsilent is a focused privacy tool; it does not replace Android updates, a strong device lock or careful backup handling.