The tremendous growth of mobile devices has a pre-generated new form of security flaws. The manifest-based permission in Android devices is one of the hefty security threats among all.We propose cloak protocol based encryption. We use exterior apache server for generating CSPRN and also we make use of the session id which will be very helpful in tracking user sessions and it will be difficult for the hackers to crack the file. For multiple user registrations, we define a new way of two-dimensional graphical authentications using a one-time password with the session ID to keep track of users. With this, the user can securely transceiver messages.