Vault - Private Storage

Vault keeps your most private photos, documents and passwords locked on your device — encrypted with a key that only you hold. No cloud account. No servers reading your files. No back doors.

Everything is encrypted on-device with AES-256, protected by your PIN and Face ID, and hardened with decoy vaults, break-in detection and emergency wipe. If it isn't your key, it can't be read — not by a thief, not by a cloud provider, not even by us.

ZERO-KNOWLEDGE BY DESIGN
Your encryption key is derived on your device from your PIN and never leaves it. We can't see your data, reset your password, or hand anything over. Privacy isn't a setting here — it's the architecture.

OFFLINE-FIRST
Vault works fully offline. Optional encrypted backup is opt-in and stays end-to-end encrypted, so even your backup is unreadable without your recovery phrase.

PHOTOS, DOCS & FILES
- Import photos, PDFs, Word, Pages and text files
- Secure multi-shot camera that saves straight into the vault, never to your camera roll
- Full-screen photo viewer and a paged PDF reader
- Organize everything into albums with cover collages
- Favorite, move, export, and restore from a 30-day Recycle Bin

PASSWORDS & 2FA
A full credential manager, built in:
- Logins with username, password and website
- Built-in authenticator (TOTP) with a live countdown
- Passkeys, payment cards, identities, SSH keys and secure notes
- A strong password generator with a live strength meter
- On-device password health that flags weak, reused and breached logins — checked privately, never uploaded
- Import from Bitwarden, 1Password, KeePass or CSV

SEARCH & OCR
On-device text recognition indexes the words inside your photos and documents, so searching "income" can surface a tax return. Nothing is sent to a server.

DECOY & DURESS
Under pressure, open a believable cover vault with a separate duress PIN. The decoy looks and behaves exactly like a normal unlock, while your real vault stays invisible — and a silent alert is quietly logged for you.

BREAK-IN DETECTION
After repeated wrong PIN attempts, Vault can silently capture a front-camera photo and location, saved to a private intruder log only you can see.

EMERGENCY & SHAKE TO WIPE
When a device is seized or a moment turns dangerous, destroy the vault instantly. A cryptographic erase overwrites the master key in milliseconds, making all data permanently unreadable. Trigger it from the menu, a lock-screen action, a duress PIN, or a hands-free shake gesture.

SECURITY MODEL
- AES-256 encryption for all content
- SQLCipher-encrypted database; files encrypted before they are written
- Biometrics gated by the device secure enclave, with PIN as the key root
- OCR, password health and breach checks all run on-device

VAULT PRO
Upgrade for unlimited photos, documents and passwords; passkeys, TOTP and password health; decoy & duress vaults with break-in selfie; end-to-end encrypted backup and cross-device sync; and OCR search with secure sharing. Available monthly, yearly (best value), or as a one-time lifetime purchase.

There is no password reset and no recovery back door — by design. Keep your recovery phrase safe, and your vault stays yours alone.