For phones without Google Play
No Play Store.Still your phone.
Millions of Android phones ship without Google Play, and a lot of good software never reaches them. This page explains how installing an app from a file works, how to check that what you installed is what the developer built, and how Vaulteon runs on a phone like yours.
Why your phone has no Play Store
There is usually nothing wrong with the phone. Three ordinary reasons cover almost every case.
It was sold without Google
Huawei phones from 2019 onwards, running EMUI or HarmonyOS 4 and earlier, ship with their maker's own app store instead of Google's. The hardware is current and the software is supported. Google's services simply are not part of it.
Google was removed on purpose
Some people install an Android build with no Google services at all, for privacy or for control over what runs in the background. The phone works normally. It just has no Play Store to install from.
It is unavailable where you are
In some countries and on some networks the Play Store is missing, blocked, or cannot take a payment even when it opens.
Phones on HarmonyOS 5 or later do not run Android apps, so Vaulteon does not install on them.
What installing from a file actually means
An Android app is a single file, an APK. A store is one way to deliver that file, and it is not the only one. When you install from a file you are doing what the store does, with two of its jobs left to you.
Android will warn you, and it is right to
The first time you open an APK, Android asks whether to allow installs from wherever you got it. That prompt is not an error and it is not a sign that something is wrong with the file. It exists because the system cannot vouch for a source it does not know, and it is asking you to vouch instead.
You are choosing who to trust
A store checks that an app is what it claims to be before it reaches you. Installing from a file moves that decision to you, which is why where you download from matters more than anything else on this page.
The permission is temporary
The allowance applies to the app you used to open the file, usually your browser or your file manager, and you can turn it off again once the install has finished.
How to check what you installed
A checksum is a short fingerprint of a file. If one character of the file changes, the fingerprint changes completely. A developer publishes theirs, you work out the fingerprint of the file you downloaded, and the two either match or they do not.
- 1Find the SHA-256 the developer publishes for the exact version you are downloading.
- 2Work out the SHA-256 of the file on your phone. Most file managers can do it, and there are small offline tools that do nothing else.
- 3Compare them. They match completely, or the file you have is not the file they published.
Vaulteon will publish a SHA-256 beside every download, on the same page as the file.
Updates without a store
A store keeps your apps current in the background. Installed from a file, nothing does that for you, so an app you sideload will sit at the version you installed until you replace it. Ask before you install how a developer will tell you a new version exists. If the answer is nothing, you will be running old software a year from now and you will not know it.
Vaulteon tells you inside the app when a new version is ready, and you can check whenever you want. Installing the new file over the old one keeps everything in your vault.
How to judge any download page
This applies to ours as much as to anyone's. If a page fails these, close it.
The developer's own site, not a mirror
Sites that collect other people's APKs have no way to know a file was not altered before they got it, and no relationship with the developer to lose if it was.
A published checksum for that exact version
Without one you have no way to tell a genuine file from an altered one, no matter how the page looks.
A version number and a date
A download with no version is a download you cannot check, cannot report and cannot tell apart from the one you already have.
It says who is selling, and what happens to your money
If a page takes a payment it should name the seller before you reach the button, not after.
It does not promise the impossible
Software that claims nothing can ever go wrong is describing a wish. A page worth trusting tells you what its protection does and where it stops.
How Vaulteon runs on a phone with no Google
Not a list of what we hope to do. Each of these is in the app today and was checked on a phone without Google services.
Hiding files works the same way
Moving a photo or a document into the vault removes the original, on a phone with Google services and on a phone without. The two use different parts of Android to do it, which is why it was tested separately on a Huawei with no Google services before we would say so.
The lock can react sooner on this build
Android offers an accessibility permission that tells an app which window has come to the front. Turning it on in your phone's settings lets Vaulteon notice a protected app opening sooner than it otherwise would. It is optional, it is off until you turn it on, and the app works without it.
That permission cannot read your screen
Vaulteon asks Android for the name of the window that came forward and nothing else. It is declared unable to read screen content, which is a setting Android enforces rather than a promise we make, and a test in our build checks that the declaration has not changed.
Backups never needed Google
A backup is written as one encrypted file through Android's own file picker, so it can go to your phone, an SD card, a USB drive, or any storage app you already have installed. Nothing about it depends on Google services.
Your backup key has somewhere to live
Vaulteon saves a copy of the key that opens your backups to your Vaulteon account, locked with your PIN, pattern or password, and that needs no Google services. You can keep a second copy in a cloud account you connect: a hidden folder in Drive on phones with Google services, or whichever provider you connected on phones without, and the app names the account it used.
Built for the phone you have.
An app lock and an encrypted vault, installed from a file, with a checksum you can check.
Get notified at launch