Vaultumi

Photo vault apps: what to check before you trust one with your photos

By Vaultumi. Published .

A photo vault holds the pictures you least want to lose or leak, so it deserves more scrutiny than a typical app. You do not need to be a cryptographer. Eight plain questions, most answerable from the App Store page and the app’s own website, will tell you a lot.

Key takeaways

  • Specific claims beat slogans. Name of algorithm, what is encrypted and where the keys live are checkable. “Unbreakable” is not.
  • Look for what the app admits it cannot do. A vendor that lists limits is easier to trust than one that lists none.
  • You should always be able to get your photos out, for free, even if you stop paying.
  • Test the recovery and backup story before you put your only copies in.

1. Is the encryption claim specific?

Vague phrases such as “bank-level” or “unbreakable” tell you nothing, because they have no technical meaning. Look instead for:

  • the name of the cipher and mode, for example AES-256-GCM, which also detects tampering;
  • whether each file has its own key, and whether names, dates, albums and thumbnails are encrypted too, not only the pictures;
  • how the PIN becomes a key. A slow key-derivation function and a secret tied to the device make guessing harder than a short PIN alone would;
  • whether the app relies on Apple’s own cryptographic libraries or its own code.

If the site gives none of this, ask yourself what is being hidden.

2. Does it need an account, and what does it send out?

An account means a server, and a server means data that can be breached, subpoenaed or lost when a company closes. Some products need that for syncing, and that is a legitimate trade. But you should know which side of it you are on.

Read the privacy policy and the “App Privacy” section on the App Store page. Ask: does it upload my photos, does it use analytics or advertising SDKs, what happens if the company disappears? Vaultumi, for comparison, has no account, no server and no analytics, and makes no network requests of its own beyond Apple’s App Store for purchases.

3. How does the lock behave under attack?

A 6-digit PIN has only a million possibilities, so what matters is how the app slows a guesser. Good signs are escalating waits, a clock that changing the date does not fool, and a key that is partly bound to the phone. Be wary of apps that offer to wipe your data after a few wrong tries, since a child or a pocket can trigger that. Vaultumi waits longer after each wrong guess, up to an hour per attempt, and never deletes anything because of wrong PINs.

4. Is there a backup you can hold in your hand?

Ask whether you can make a backup file, where it goes, and how it is protected. A real backup is a file that you choose where to save, encrypted with a passphrase, and restorable on a different phone. “It is in the cloud” is not a backup unless you control the keys. A good app also lets you test the file. Vaultumi has a free Backup safety check that opens a file and reports what is in it without changing the vault. See how to back up a private photo vault.

5. Can you get your photos out, free, at any time?

This is the most important commercial question. If export is behind a paywall, you are renting access to your own pictures. Check the App Store description and the terms for wording about what happens when a subscription ends. In Vaultumi, existing items are never locked or removed if Premium ends: you can still view, export and back up everything and restore any backup. You cannot add beyond the free limits of 20 items and 2 albums.

6. Are the subscription terms clear?

Look at the price, the billing period, the free trial terms, and how to cancel. Apple handles subscriptions, so cancellation happens in iOS settings, not inside the app. Be cautious of apps that show a paywall before you see what the app does, or that are vague about what is free. The honest question is: what exactly do I lose if I stop paying?

7. Is the recovery story honest?

You want one of two clear answers. Either the vendor can reset your access, in which case they hold a way in, or they cannot, in which case you are responsible. Neither is wrong, but pretending to offer both is. Vaultumi cannot: it has a recovery code, shown once, and an encrypted backup file. Lose both with no usable backup and the vault is gone. The page on forgetting a PIN shows how that plays out.

8. Has anyone outside checked it, and does it say so?

Independent reviews are good, but only if they are real, recent and cover the current version. Claims of “audited” or “certified” with no report are a warning. The absence of a review is not a scandal either, as long as it is stated. Vaultumi has not been independently reviewed or audited. It uses standard Apple encryption primitives, but includes hand-written scrypt and secret-sharing code that has not had an external review. It lists known limits on its security page, including that it cannot stop screenshots and cannot help on a compromised phone.

Using the checklist

You do not need eight perfect answers. You need no unpleasant surprises. An app that is clear about its encryption, its network behaviour, its backup and export, and its limits is worth far more than one with a long list of badges. Run through the questions in the App Store listing, the website and the first ten minutes of use, then put in a few unimportant photos first and practise a restore before you trust it with the real ones.

All guides