Vaultumi

Are photo vault apps safe? It depends on what you can check

By Vaultumi. Published .

The honest answer is that it depends on the app. A photo vault can be a properly encrypted store, or it can be little more than a folder with a lock screen in front of it. You do not have to take the marketing on trust, because most of the difference can be checked.

Quick answer

Some are safe enough for the job, and some are not. A photo vault app is only as safe as three things: whether it really encrypts your files, who else can reach them, and what happens when you forget the lock. Marketing words such as “military grade” tell you nothing about any of the three.

  • Safe vaults encrypt each file on the device, need no account, send nothing out and say plainly how recovery works.
  • Unsafe ones hide files without encrypting them, keep a copy on a server, load advertising code or let someone reset the lock by email.
  • No vault protects a compromised iPhone, someone watching you type your PIN, or a photo you already shared.

How can a photo vault app fail?

These are the failure patterns to know about. They are general, and this page does not claim that any named app has them.

  • The lock only hides. The photos sit in a normal folder and the app puts a PIN screen in front. Anyone who gets at the files, for example from a device backup, skips the screen.
  • The key is stored next to the data. Encryption is only as good as where the key lives and what unlocks it.
  • There is an account or a cloud copy. A server can be breached, shared, sold or handed over, and an account can be taken over. It also means a reset by email exists, so someone else could use it too.
  • Third-party code sees your behaviour. Advertising and analytics libraries can learn that you use a vault, and how often, even if they never see a photo.
  • Home-made cryptography has a bug. Custom code needs outside review, and many small apps never get any.
  • The business model traps you. If your photos stay readable only while a subscription runs, a lapsed payment becomes a lock-in problem.

What can a good vault protect against?

A well-built vault protects the files at rest on your iPhone. In practice that covers a curious friend who borrows your phone, a thief holding a locked phone, someone who knows your habits and tries likely PINs, and someone who gets hold of a copy of the vault files, such as a backup.

For the last case the details matter. In Vaultumi, for example, the PIN is stretched with scrypt and combined with a secret that lives only in that iPhone’s Keychain and in no backup, so a copy of the files alone cannot be used to test PIN guesses. The security page explains the mechanism and its limits.

What can no vault protect against?

Be wary of any app that does not say this part out loud. A vault cannot help with:

  • a jailbroken or malware-infected iPhone, which can read what is in memory while the vault is open;
  • someone watching you enter your PIN, or forcing you to unlock the phone;
  • screenshots, which iOS saves to your Photos library outside the vault, and which no app can block;
  • exported or shared copies, which are ordinary files once they leave the vault;
  • the original photo you forgot to delete, which stays in Recently Deleted for about 30 days and may exist in iCloud or on other devices;
  • forgetting every secret, because a vault without a back door has no way back in.

What should you check before you trust one?

  1. Is the encryption claim specific? Look for the algorithm, the key length and what the key is derived from, not just a slogan.
  2. Does it need an account, and what does it send out? No account and no network traffic of its own is the strongest answer.
  3. Does the lock slow down guessing? A 6-digit PIN has a million possibilities, so there must be a limiter and a stretched key.
  4. Is there a backup you can hold? An encrypted file that restores on another device matters more than any cloud promise.
  5. Can you export everything, free, at any time? Your photos should never be locked behind a payment.
  6. Does it say whether anyone outside has checked it? Honest apps state their review status, including when the answer is “not yet”.

The longer version, with what to look for under each point, is the photo vault app checklist.

How does Vaultumi answer those checks?

CheckVaultumi today
EncryptionAES-256-GCM from Apple’s CryptoKit, each item under its own random key, PIN stretched with scrypt
Account and networkNo account. No network requests of its own and no third-party SDKs. Only Apple’s App Store is involved, for purchases
Guess limiterWaits from 30 seconds up to an hour after 5 wrong PINs. Nothing is ever deleted because of wrong PINs
BackupAn encrypted backup file that restores on any iPhone with its passphrase, plus a check that proves it opens
ExportFree and never part of Premium, even if Premium ends
Outside reviewNone so far. The hand-written scrypt and secret-sharing code still need external review

The last row is the one to weigh. Vaultumi publishes its architecture, its threat model and its review notes so that you can judge it, and a separate page answers the audit question directly.

How do you use a vault sensibly?

  • Put only the photos that matter in it. Everything else can stay in the normal library.
  • Delete the originals after you check the import, then clear Recently Deleted.
  • Write the recovery code on paper and keep a tested backup file in a different place from its passphrase.
  • Treat the vault as one layer next to a strong device passcode, current iOS and Find My.

If you only want a photo out of the main grid, the built-in Hidden album may be enough. The hidden album versus vault app guide helps you decide.

Sources

Primary sources behind the statements about iOS and cryptography on this page. The linked pages are in English.

All guides