Hide Photos & Videos: Vault

Lock private photos, videos, and passwords behind Face ID and on-device encryption. Zero-knowledge: your keys and plaintext never leave your device. No account needed.

Keep the photos, videos, files, and passwords you'd rather keep private locked away in one app — Private Vault.

Worried about handing your phone to family or friends and having them stumble onto something private? The built-in "Hidden" album in Photos can be opened by anyone. Real privacy needs a dedicated vault.

■ Highlights

【Full encryption】 ChaCha20-Poly1305 (military-grade, RFC 7539) protects every item. The master key lives only in RAM while the app is unlocked and is zeroed out the moment you lock. Without your password, nobody — including us — can read your data. Zero-knowledge by design.

【Layered lock】 Face ID, Touch ID, and a PIN code. The vault re-locks instantly when you send the app to the background. If you re-enroll your biometrics, the cached key is automatically invalidated.

【Photos, videos, and files】

• Bulk import from Photos library (with optional auto-delete of the original)
• Take photos directly inside the app (never written to the camera roll)
• Live Photos, HEIC, and 4K video are all supported
• Import any file type from the Files app — PDFs, documents, archives, and more — each stored encrypted on-device
• Choose whether to keep or strip GPS / location metadata
• Originals and thumbnails are both encrypted at rest, on-device only

【Organize with albums】

• Sort everything into albums — with smart built-in Favorites, Photos, Videos, and Files albums
• Create your own albums and nested sub-albums
• Rename, pin to the top, set a custom cover, and sort by newest or oldest
• Deleting an album never deletes your media

【Password manager】

• Store logins, passwords, and secure notes — all encrypted on-device
• Built-in strong password generator
• Password strength meter
• Have I Been Pwned breach check (see the transparency note below)

■ HIBP breach check transparency

The breach check uses k-anonymity. We never send your password or its full hash to any server. Only the first 5 hexadecimal characters of the SHA-1 hash leave your device, queried against api.pwnedpasswords.com; the candidate list returned by the server is matched on-device. No full hash, no plaintext password, and no other data is transmitted.

■ Privacy commitments

• Vault contents (photos, videos, files, passwords, master key material) are encrypted on-device and never sent to our servers — optional iCloud sync (off by default) stores only encrypted blobs in your own private iCloud
• No ads
• No account required (your vault data stays on your device by default)
• We use Firebase Crashlytics to monitor stability and improve features. This service never includes vault contents, file bytes, passwords, filenames, or anything you store
• Password breach check uses Have I Been Pwned with k-anonymity (only the first 5 hex chars of SHA-1 leave your device)
• Built on swift-crypto (Apple-maintained)

■ Who this is for

• People with photos they'd rather keep out of casual view
• Anyone managing passwords in Notes or messaging apps
• Anyone who needs a private, encrypted place for sensitive documents
• Parents who occasionally hand the phone to a child
• Anyone uneasy about putting sensitive data in the cloud