Your Spotify + YouTube Music library, downloaded and playable offline.
Stash is an offline-first Android music player that syncs your liked songs, playlists, daily mixes, and discover mixes from both Spotify and YouTube Music into a single unified local library. Tracks are downloaded as high-quality Opus audio and played through a Material 3 interface with a full equalizer, queue management, and smart source-aware browsing.
Stash is not an online streaming service. It's a personal-library tool for people who already have Spotify or YouTube Music accounts and want their library available offline on their terms.
- Dual-source sync — pull from Spotify and YouTube Music into one library, or filter by source
- Offline everything — tracks download as high-quality Opus audio, playable without internet
- Bulletproof matching — album-first pipeline finds the right version of every song, not some random live recording or cover
- Custom playlists — create your own playlists and save tracks to them from anywhere. Bookmark icon in Now Playing makes it one tap.
- Spotify sync preferences — choose exactly which playlists, liked songs, daily mixes, and discovery mixes to sync. Individual toggles for each. Don't want Daily Mix 3? Turn it off.
- Expanded Spotify mix detection — Release Radar, Discover Weekly, On Repeat, Daylist, Repeat Rewind, Time Capsule, and Daily Mixes 1-6 are all automatically detected when available. Each gets its own toggle.
- Refresh vs Accumulate sync modes — mixes can either replace their contents each sync (Refresh) or stack new tracks on top of what's already there (Accumulate). Your call.
- Parallel downloads — 8 simultaneous tracks. Background sync runs as a foreground service so it actually finishes with the phone locked.
- High-res album art — YouTube thumbnails upgraded from 60px to 544px, Spotify art from 300px to 640px. Existing tracks get migrated on startup.
- Automatic update notifications — checks GitHub for new releases daily and notifies you when one is available. Tap the notification to go straight to the download page.
- Full equalizer — 5-band EQ with presets, bass boost, and virtualizer
- Smart playback — queue management, drag-to-reorder, swipe-to-remove, random start on play-all
- Spotify sign-in built in — just log into Spotify inside the app, no cookie hunting required
- Private by design — credentials encrypted with AES-256-GCM, no servers, no telemetry, nothing leaves your phone
- Free and open source — no subscriptions, no ads, GPL-3.0
- Android 8.0 (API 26) or later
- Roughly 5-10 GB of free storage for a medium library (scales with your library size)
- An active Spotify account (free or premium) and/or a YouTube Music account
- Willingness to sideload APKs — Stash is not on the Google Play Store and won't be (see Why Not Play Store? below)
- Open the Releases page on your Android device's browser.
- Download the latest
Stash-v*.apkfile. - Open the downloaded file.
- If Android warns you about "installing from unknown sources," tap Settings and allow it for your browser, then try opening the file again.
- Tap Install when prompted.
- Done — open Stash from your app drawer.
Obtainium is a free app that tracks GitHub Releases and notifies you when a new version is out. If you don't want to manually re-download APKs each release:
- Install Obtainium.
- Tap Add App and paste
https://github.com/rawnaldclark/Stash. - Obtainium will now prompt you to update whenever a new Stash release ships.
git clone https://github.com/rawnaldclark/Stash.git
cd Stash
./gradlew assembleDebug
# APK lands in app/build/outputs/apk/debug/You'll need Android Studio (Hedgehog / 2023.1.1 or later), JDK 17, and Android SDK 35. Open the project in Android Studio, let Gradle sync, then Run.
Stash doesn't use Spotify's or YouTube's official APIs (they don't offer what Stash needs). Instead, you paste in your login cookies from a web browser. This sounds scary but takes about two minutes per service. Your cookies live only on your phone, encrypted with AES-256-GCM, and are sent only to Spotify and YouTube themselves — never to a Stash server (there isn't one).
🎵 Connect Spotify (click to expand)
- A computer or another device with a desktop browser (Chrome, Firefox, Edge, or Safari)
- Your Spotify account logged in on that browser
- Open Stash → Settings → tap Spotify under Accounts → tap Connect.
- A Spotify login page will appear inside the app.
- Sign in with your email/password, Google, Apple, or Facebook — whatever you normally use.
- Once login succeeds, Stash extracts the cookie automatically. Done.
If the in-app login doesn't work for you, use Option B below.
- On your computer, open https://open.spotify.com and make sure you're logged in.
- Press F12 on your keyboard to open Developer Tools. A panel will open on the right or bottom of your browser.
- Find the Application tab at the top of the DevTools panel (on Firefox it's called Storage). If you don't see it, click the
>>arrows to find it. - In the left sidebar of that tab, expand Cookies → click
https://open.spotify.com. - You'll see a list of cookies. Find the one named
sp_dc. - Double-click the value next to
sp_dcand copy it (Ctrl+C / Cmd+C). It's a long string of random characters. - Open Stash on your phone → Settings → tap Spotify → tap Connect → tap "Paste cookie" in the top-right corner.
- Paste the
sp_dccookie into the dialog and tap Connect.
Tip: Some users have reported that cookies from incognito/private browsing windows can fail to sync. If you run into issues, try using your regular (non-incognito) browser window instead.
Why a cookie and not a password? Spotify's mobile login API doesn't allow third-party apps. The cookie approach lets Stash authenticate as your browser session does. The cookie is session-scoped and can be revoked by logging out of Spotify on the web.
📺 Connect YouTube Music (click to expand)
- A computer or another device with a desktop browser
- Your YouTube Music account logged in on that browser
- On your computer, open https://music.youtube.com and make sure you're logged in.
- Press F12 to open Developer Tools.
- Click the Network tab at the top of DevTools.
- Refresh the YouTube Music page (F5 / Cmd+R).
- In the Network tab's filter/search box, type
browseand press Enter. - Click any of the requests in the list (they should all start with
browse). - Scroll down in the right panel until you find Request Headers.
- Find the line starting with
cookie:and copy the entire value aftercookie:— it will be a very long string with many=and;characters. - Open Stash on your phone → Settings → tap YouTube Music under Accounts → tap Connect.
- Paste the full cookie string and tap Connect.
Stash will start fetching your YouTube Music daily mixes, discover mix, replay mix, and liked music.
Tip: Some users have reported that cookies from incognito/private browsing windows can fail to sync. If you run into issues, try using your regular (non-incognito) browser window instead.
Why the whole cookie header? YouTube uses multiple cookies together to authenticate (
SAPISID,__Secure-3PAPISID, andLOGIN_INFO). Grabbing all of them at once is easier than finding each individually.
Once you've connected a service, head to the Sync tab. Before you hit Sync Now, expand the Spotify Sync Preferences card to pick exactly what you want — liked songs, specific playlists, daily mixes, discovery mixes like Release Radar and Discover Weekly, or all of the above. Each one gets its own toggle. Uncheck anything you don't care about and it won't waste your time or storage.
For mix playlists, you can also choose between Refresh mode (replaces the mix contents each sync, cleaning up old tracks) and Accumulate mode (stacks new tracks on top of what's already there). Refresh is the default and works well for most people.
The first sync takes a while depending on how much you're pulling (a library of 1000+ songs might take an hour or so — downloads run 8 at a time now, so it's faster than it used to be). After that, daily syncs just grab whatever's new. You can set it to run automatically on a schedule so your library stays current without you thinking about it.
Some Android devices kill background processes aggressively to save battery. If your sync fails with a foreground service error or just stops partway through, you need to let Stash run unrestricted:
- Go to your phone's Settings → Apps → Stash
- Tap Battery (or "App battery usage")
- Select Unrestricted
This tells Android to let Stash keep running in the background while it downloads your library. Without this, some phones will kill the sync after a few minutes. You only need to do this once.
Note for Samsung, Xiaomi, OnePlus, and Huawei users: These manufacturers have extra battery restrictions on top of stock Android. If setting Unrestricted doesn't help, check dontkillmyapp.com for device-specific instructions.
Stash downloads audio from YouTube and Spotify, which violates both services' Terms of Service. Google Play policy bans apps that facilitate unauthorized downloads. Every app in this space — NewPipe, YTDLnis, SpotTube, InnerTune — is distributed outside the Play Store for the same reason.
That's not a bug, it's a principled stance: open-source tools that give users control over their own libraries don't belong in a gatekept store that could revoke them on a whim. Distribution via GitHub Releases and F-Droid (once we're ready) is the right home for Stash.
- Nothing leaves your device except the API calls to Spotify and YouTube themselves.
- No analytics, no telemetry, no crash reporting to third parties.
- Cookies are encrypted at rest with AES-256-GCM via Google's Tink library.
- No Stash servers exist. There's no account, no backend, no "cloud sync" of anything.
- All code is open source and auditable — see the repo.
If you find a security issue, please see SECURITY.md for responsible disclosure guidelines.
Stash is an independent, unofficial project. It is not affiliated with, endorsed by, or sponsored by Spotify AB, YouTube LLC, Google LLC, or Alphabet Inc. All trademarks are the property of their respective owners.
Stash is provided for personal use only as a tool for managing your own library. You are responsible for complying with the Terms of Service of any music service you use Stash with. Downloading copyrighted content without a license may be illegal in your jurisdiction. The Stash project accepts no responsibility for misuse.
Contributions are welcome. Issues and pull requests through GitHub are the primary channel. Before sending a large PR, please open an issue to discuss the change.
Stash is licensed under GPL-3.0, which means:
- You can use, copy, modify, and redistribute Stash freely.
- If you distribute a modified version, you must also release your source code under GPL-3.0.
- No warranty is provided.
See the LICENSE file for the full text.
Stash is free, open-source, and has no ads or telemetry. If it replaced a subscription for you, consider supporting the project:
You can also sponsor on GitHub for recurring support.
Every contribution — whether it's a donation, a GitHub star, a bug report, or telling a friend — helps keep Stash alive and improving. Thank you.
Stash stands on the shoulders of several open-source projects:
- yt-dlp — the backbone of all YouTube downloading
- JunkFood02/youtubedl-android — Android bindings for yt-dlp
- QuickJS-NG — lightweight JS engine for YouTube's signature challenges
- Media3 / ExoPlayer — audio playback
- ytmusicapi — YouTube Music API reverse-engineering reference
- Bungee Shade — the retro wordmark font, by David Jonathan Ross (SIL OFL)
Copyright © 2026 Rawnald Clark
Stash is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.