What Is an NCM File? How to Open It on Any Device

2026-10-16 · Formavide

You downloaded a song and got a mysterious .ncm file that refuses to play in anything except one specific app. Here's what that file actually is, what's hiding inside it, and how to open it on any device you own.

Converts to the original MP3/FLAC bit-for-bit, metadata and cover art kept. Nothing uploads. Free to try.

NCM is a lock, not an audio format

An .ncm file is a container used by NetEase Cloud Music to store downloaded songs in an encrypted wrapper. The confusing part — and the key to everything — is that NCM is not an audio format. Inside the wrapper sits a completely ordinary music file: an MP3, a FLAC, sometimes an M4A. The NCM layer doesn't change the audio; it just scrambles who's allowed to read it.

That's why every attempt to "play" the file outside the official app fails strangely: players find a wall of encrypted bytes where they expect an MP3 header. The song isn't damaged — it's locked.

What's actually inside an NCM file

The container is simpler than you'd expect. After a short magic header identifying the format, it carries:

• The key material — the data needed to recover the per-file AES key, itself hidden under a well-known obfuscation.
• Metadata as JSON — title, artist, album, and the music IDs, stored as readable fields once decrypted.
• Cover art — the embedded album image, extracted alongside the audio.
• The audio payload — a standard, unmodified music stream. MP3s keep their ID3 tags; FLACs keep their lossless data.

Because the audio payload is never re-encoded, unlocking an NCM is lossless by nature: a 320 kbps MP3 comes out as the same 320 kbps MP3, and a lossless FLAC comes out as the identical FLAC. Any tool that "converts" NCM files by decoding and re-encoding is damaging your music for no reason.

How to open an NCM file on any device

1. Get the file out from the app's download folder (on desktop it lands next to the cache; on mobile it's usually in the app's own directory).
2. Open an NCM-aware unlocker — the browser-based one we build runs the entire decryption locally in JavaScript, so the file never leaves your device.
3. Drop the file in. The tool recovers the key, reverses the encryption, and detects the true format inside from the audio's magic bytes (ID3 → MP3, fLaC → FLAC, and so on).
4. Save the unlocked MP3/FLAC with its title, artist, album and cover art intact. It now plays in any player, car stereo, DJ software or editor.

Why can't players just support NCM?

Supporting NCM would mean implementing the lock, not the music — and the lock exists specifically to keep playback inside the licensed app. Media players have no incentive to bless one store's DRM-style wrapper (and NCM is technically an obfuscation rather than sanctioned DRM, which is exactly why independent unlockers are possible at all).

A word on what this is for

The wider family

NCM isn't alone. QQ Music wraps songs in QMC/MFLAC/MGG, Kugou in KGM/KGG, Kuwo in VPR — same concept, different locks. The same local approach unlocks the older generations (newer key-server schemes like KGG and QQ Music's musicex aren't crackable offline); our converter handles NCM, QMC, KGM and more with the same no-upload, no-re-encode rule.