What is a .PENC file?
A .penc file is a Samsung Secure Folder encrypted package from a phone backup - an app (often an APK) sealed with a Knox device-bound key. Its 00 10 00 10 header identifies it, but the payload cannot be decrypted off the original device.
- Did you know
- Samsung Secure Folder uses the phone's hardware-backed Knox keystore, so a .penc copied off the device is cryptographically useless without that exact phone.
- The .penc container is produced by Samsung Secure Folder, a Knox-backed encrypted sandbox Samsung introduced in 2017.
- Secure Folder works by running a second, encrypted copy of your apps in an isolated Android work profile, which is what the .penc file seals off from the rest of the phone.
- What Analyser reads
- Inspect security and crypto files: PEM private/public keys (RSA/EC/Ed25519, PKCS#1 vs PKCS#8, encryption), OpenSSH .pub with SHA-256 fingerprint, PuTTY .ppk, PKCS#10 CSR, X.509 CRL, PKCS#7 bundles, OpenVPN/WireGuard configs, Java KeyStores, Apple .mobileconfig/.mobileprovision, Windows .reg (with autorun flagging), and pcap/pcapng captures - warning when a private key or secret is present.
- Depth of analysis
- .PENC is an identification-grade format: Analyser recognises it from its bytes and decodes the header metadata it carries, rather than opening it in a full viewer. Formats that do get a full viewer are marked "Full" on the formats page.
- Open a .PENC file
- Drag a .PENC file onto the Analyser home page (or tap to pick one). It is identified entirely in your browser - nothing is uploaded, there is no account, and it works offline once installed.