Vaultgrim — Smart Encryption Suite

01 — About

Why Vaultgrim?

Vaultgrim is a smart encryption suite for the terminal. It does not lock you into one cipher or one file class. You choose what you are protecting — source code, binaries, keys, archives, media, configs — then Vaultgrim recommends an algorithm and walks you through protection modes.

Built for people who live in shells: Linux desktops, Ubuntu servers, and Android via Termux. Flat prompts. Clear menus. No glossy dashboard.

[ Install Vaultgrim ]

vaultgrim · select file type

Vaultgrim - Smart Encryption Suite
────────────────────────────────────
SELECT FILE TYPE TO ENCRYPT

SCRIPTS & CODE
  [1] Python     [2] JavaScript
  [3] Ruby       [4] Perl
  [5] Bash       [6] PHP
  [7] Java       [8] C/C++
  [9] Go         [10] Rust

APPLICATIONS
  [11] APK   [12] IPA   [13] EXE/DLL
  [14] ELF   [15] macOS .app

SECURE · ARCHIVES · WEB
  [16–19] keys, certs, passwords, DBs
  [20–24] zip, docs, images, video, audio
  [25–27] html/css, conf, json/xml
  [0] Custom — any file

Select file type [0-27]: 5

Start by telling Vaultgrim what kind of file you are encrypting. Recommendations follow the type.

02 — Workflow

Three prompts. Full control.

1. File type — scripts, apps, secrets, archives, media, web assets, or custom.

2. Algorithm — AES, ChaCha, Camellia, SM4, Twofish, ARIA, Serpent, XChaCha… with a recommended default for that type.

3. Options — Standard key file, password, stealth (encrypt + secure-delete original), or ultimate (password + self-destruct).

03 — Coverage

Twenty-seven file classes, plus custom

Vaultgrim groups targets so the suite can pick sane defaults — without hiding the full algorithm list.

Scripts & code

[1] Python (.py, .pyc)
[2] JavaScript (.js, .mjs)
[3] Ruby (.rb)
[4] Perl (.pl, .pm)
[5] Bash/Shell (.sh)
[6] PHP (.php)
[7] Java (.java, .class, .jar)
[8] C/C++ (.c, .cpp, .o, .so)
[9] Go (.go)
[10] Rust (.rs)

Applications

[11] Android APK (.apk)
[12] iOS App (.ipa)
[13] Windows EXE/DLL
[14] Linux Binary (.elf)
[15] macOS App (.app)

Secure files

[16] SSH keys
[17] SSL certs (.pem, .crt, .key)
[18] Passwords (.pass, .kdbx)
[19] Databases (.db, .sqlite, .sql)

Archives & data

[20] Archives (.zip, .tar, .gz)
[21] Documents (.pdf, .docx, .xlsx)
[22] Images (.jpg, .png, .gif)
[23] Videos (.mp4, .avi, .mkv)
[24] Audio (.mp3, .wav, .flac)

Web & network

[25] HTML/CSS
[26] Config (.conf, .cfg, .ini)
[27] JSON/XML

Utility

[0] Custom — select any path

When no preset fits, Custom still runs the full algorithm and options flow.

vaultgrim · algorithm

SELECT ENCRYPTION ALGORITHM
────────────────────────────────
RECOMMENDED FOR THIS FILE TYPE
  [R] ChaCha20-Poly1305   [2]

AVAILABLE ALGORITHMS
  [1] AES-256-GCM          Military grade
  [2] ChaCha20-Poly1305    Fast — mobile/IoT
  [3] Camellia-256-GCM     Japanese standard
  [4] SM4-GCM              Chinese standard
  [5] Twofish-256-GCM      Schneier design
  [6] ARIA-256-GCM         Korean standard
  [7] Serpent-256-GCM      Strong alternative
  [8] XChaCha20-Poly1305   Extended nonce

Press [R] or [1-8]: R

Recommended cipher is highlighted for the file type you picked. Every algorithm stays selectable.

04 — Ciphers

Eight modern AEAD algorithms

All listed modes are authenticated encryption (GCM / Poly1305). Integrity and confidentiality travel together.

Press R for the type-aware recommendation, or pin a national/standard cipher when policy requires it.

#	Algorithm	Profile
[1]	AES-256-GCM	Military-grade baseline · hardware AES-NI friendly standard
[2]	ChaCha20-Poly1305	Fast on mobile/IoT and ARM without AES acceleration recommended often
[3]	Camellia-256-GCM	Japanese industrial standard
[4]	SM4-GCM	Chinese national standard
[5]	Twofish-256-GCM	Bruce Schneier design · AES finalist lineage
[6]	ARIA-256-GCM	Korean standard
[7]	Serpent-256-GCM	Conservative high-security alternative
[8]	XChaCha20-Poly1305	Extended nonce · strong default for large corpora best nonce UX

vaultgrim · options

ENCRYPTION OPTIONS
────────────────────────────────
  [A] Standard   Key file generated automatically
  [B] Password   Add password protection
  [C] Stealth    Encrypt + secure-delete original
  [D] Ultimate   Password + self-destruct

Select option [A/B/C/D]: B

✓ Algorithm   ChaCha20-Poly1305
✓ Type        Bash/Shell (.sh)
✓ Mode        Password
→ Enter passphrase: ********
→ Writing sealed payload…

Protection mode is explicit. Standard for quick key files; Ultimate when the payload must die with the session policy.

05 — Protection modes

Four options. No hidden defaults.

[A] Standard

Key file is generated automatically. Fast path for local sealed artifacts you control.

key file · no passphrase prompt

[B] Password

Adds password protection on top of the chosen AEAD cipher. Share the secret out-of-band.

passphrase · human-held secret

[C] Stealth

Encrypt, then secure-delete the original path so plaintext is not left beside the sealed file.

encrypt + secure delete

[D] Ultimate

Password protection combined with self-destruct policy for high-sensitivity hand-offs.

password + self-destruct

06 — Platforms

Linux, Ubuntu, and Android Termux

Vaultgrim is shell-native. Run it where you already work:

Linux & Ubuntu — desktops, VPS, and bastion hosts with curl and a POSIX shell. Install with the step commands or the one-liner, then launch ./v.

Android Termux — same script flow inside Termux. Useful for encrypting notes, keys, and packages on-device without leaving the phone.

Linux Ubuntu Debian Fedora Arch Android Termux WSL POSIX shell

07 — Install

Two ways to run it

Step install — download, mark executable, run. Easy to inspect the script before launch:

$ curl -sL https://raw.githubusercontent.com/wahaca9693/vaultgrim/main/encrypt-file.sh -o v
$ chmod +x v
$ ./v

One-liner — pipe straight into bash when you already trust the source:

$ curl -sL https://raw.githubusercontent.com/wahaca9693/vaultgrim/main/encrypt-file.sh | bash

Source script: raw.githubusercontent.com/wahaca9693/vaultgrim/main/encrypt-file.sh

08 — Practice

Use it responsibly

Vaultgrim is an encryption utility for files you own or are authorized to protect. Keep key files and passphrases offline when stakes are high. Test decrypt paths before enabling stealth delete. On shared hosts, prefer password modes and avoid leaving keys in world-readable paths.

Review the install script before piping to bash. The step install flow exists so you can read first, run second.

Install

Seal the file. Keep the keys.

Start from the terminal. Shape the rest with type, cipher, and mode.

$ curl -sL https://raw.githubusercontent.com/wahaca9693/vaultgrim/main/encrypt-file.sh -o v
$ chmod +x v
$ ./v

[ Browse file types ]