Shelf

about

description

Shelf is a private-space utility that can appear on the launcher as a habit tracker, calendar, or calculator. Each decoy is a functional app with its own name, icon, and colour scheme. Five taps in the top-right corner open the credential prompt. Settings adds a second, quieter gesture: a long or double tap on the decoy title, or the PIN typed straight into the calculator. Access uses a PIN, a password, a 3×3 pattern, or a knock code on four unmarked quarters. The knock pad shows a blank screen while it is entered, so a watcher learns neither the length of the code nor how far through it you are. Optional strong-biometric unlock always opens the real space, with the credential as fallback. The entry gesture can also put up a fake app-has-stopped dialog; a long press on its message carries on to the credential. Auto hide runs after screen off, immediately when Shelf leaves the foreground, or never. It closes the private space and puts exposed folders back out of sight. A timer can also put them back after a set time with the screen on. An optional quiet notification, under the disguise's own name, offers the same emergency hide on demand. Folders you add stay on the list whether or not they are hidden, and one control hides or unhides all of them at once. A hidden folder can be opened without unhiding it: photos, video, audio, PDFs, and text are decrypted as they are read, with nothing written back to disk and no gallery picking them up. An optional second credential opens a private space that looks and behaves like the real one and contains nothing that matters, the one to give up if you are ever made to hand one over. Shelf records that it was used and tells you on your next real unlock, along with any wrong credentials someone else tried. A separate emergency PIN destroys the encryption keys and journals as soon as it is entered at any unlock prompt. Turning the phone face down or plugging in a USB cable can also lock everything at once. Folders can be hidden in three ways: with root, by clearing permission bits on the backing filesystem; with optional all-files access, by moving the folder under random names into a hidden directory; or with no special permission, by renaming it with a leading dot through the system folder picker. All three replace file names with opaque identifiers, protect the first 64 KiB of each file, and keep the originals in a recovery manifest encrypted with your credential. Folders at the top of internal storage or in Download need all-files access, since Android grants no picker access there. Each folder operation is journalled before anything changes. Recovery markers, "Unhide everything", read-only health checks, and a password-encrypted export of recovery records cover reinstalls and lost app data. The theme follows the system or is fixed to light, dark, or AMOLED. Shelf can be kept out of the recent apps list, and screenshots of the private space are blocked unless you allow them. Root is optional. Shelf has no network access, analytics, advertising, or cloud service. Shelf does not provide full-file encryption. Data beyond each protected header remains recoverable with forensic tools, and historical file names may remain in system or app caches. Shelf is designed to prevent casual browsing, not resist an attacker with root access. The full threat model is at https://github.com/melastore/shelf/blob/main/THREAT_MODEL.md

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-10-18T02:39:47.818689+00:00

last event

2026-10-25 16:02 UTC

install

zapstore.dev or any Zapstore-compatible client

topics

#file encryption & vault

source & build

repository

https://github.com/melastore/shelf

arch flags

android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64

manifest

missing

releases (kind 30063)

4 releases indexed; latest 0.11.3.

version	channel	released	event
0.11.3	main	2026-10-25 16:02 UTC	86087008…
0.11.2	main	2026-10-20 12:01 UTC	2b5fa741…
0.11.1	main	2026-10-18 13:59 UTC	ad89de28…
0.11.0	main	2026-10-17 18:13 UTC	b5c15826…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

0.11.3 — shelf-0.11.3.apk

sha256

ce866c743e052d0670329768ac997a2dd3146f380c3da82bcbff9e65e442b251

size

3.1 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64

version code

29

apk cert sha256

c0a840767117551defe6282499cf23a10c586a42da67a8bb4f038ef297d6a405

download

shelf-0.11.3.apk

0.11.2 — shelf-0.11.2.apk

sha256

69ee3d6c64cd2c464784363fa6f7046e663baf1fd994aaf5d63c1e16f7807575

size

3.1 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64

version code

28

apk cert sha256

c0a840767117551defe6282499cf23a10c586a42da67a8bb4f038ef297d6a405

download

shelf-0.11.2.apk

0.11.1 — shelf-0.11.1.apk

sha256

a29dec6787aa4f8c2dfc1ae7cf27d034018de6e33ea915745a95890ef23385a2

size

3.1 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64

version code

27

apk cert sha256

c0a840767117551defe6282499cf23a10c586a42da67a8bb4f038ef297d6a405

download

shelf-0.11.1.apk

0.11.0 — shelf-0.11.0.apk

sha256

488928330bff58ef20cf5fd6d7c2fb2b325e509970b289594b3bd33115efae95

size

3.1 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64

version code

26

apk cert sha256

c0a840767117551defe6282499cf23a10c586a42da67a8bb4f038ef297d6a405

download

shelf-0.11.0.apk

Showing the newest 4 asset descriptors; the full set is in /api/apps/78ce6faa…