Vault: Photo Vault & Passwords

One private, encrypted vault for your files, passwords and sensitive information.

Vault is a secure vault that keeps your photos, documents and passwords locked on your device — encrypted with a key only you hold. No cloud account. No servers reading your files. No back doors.

Everything is encrypted on-device with AES-256, protected by your PIN and biometrics, and hardened with decoy vaults, break-in detection and emergency wipe.

ZERO-KNOWLEDGE BY DESIGN

Your encryption key is derived on your device from your PIN and never leaves it. We can't see your data, reset your password, or hand anything over. This is a privacy vault where privacy isn't a setting — it's the architecture.

OFFLINE-FIRST SECURE STORAGE

Vault works fully offline. Optional encrypted backup is opt-in and stays end-to-end encrypted, so even your backup is unreadable without your recovery phrase.

PRIVATE PHOTO VAULT

An encrypted photo vault for anything that shouldn't sit in your gallery

Secure multi-shot camera that saves straight into the vault

Full-screen viewer, albums with cover collages, favorites

Move, export, and restore from a 30-day Recycle Bin

SECURE DOCUMENT STORAGE

Import PDFs, Word and text files into one encrypted file vault

Paged PDF reader built in

Private document storage that never syncs anywhere you didn't approve

OFFLINE PASSWORD MANAGER

A full secure password manager, built in:

Logins with username, password and website

Built-in authenticator (TOTP) with a live countdown

Passkeys, payment cards, identities, SSH keys and secure notes

Strong password generator with a live strength meter

On-device password health that flags weak, reused and breached logins

Import from Bitwarden, 1Password, KeePass or CSV

SEARCH & OCR

On-device text recognition indexes the words inside your photos and documents, so searching "income" can surface a tax return. Nothing is sent to a server.

DECOY & DURESS

Under pressure, open a believable cover vault with a separate duress PIN. The decoy behaves exactly like a normal unlock, while your real vault stays invisible — and a silent alert is logged for you.

BREAK-IN DETECTION

After repeated wrong PIN attempts, Vault can silently capture a front-camera photo and location, saved to a private intruder log only you can see.

EMERGENCY & SHAKE TO WIPE

When a device is seized, destroy the vault instantly. A cryptographic erase overwrites the master key in milliseconds. Trigger it from the menu, a lock-screen action, a duress PIN, or a shake gesture.

SECURITY MODEL

AES-256 encryption for all content

SQLCipher-encrypted database; files encrypted before they are written

Biometrics gated by the device keystore, with PIN as the key root

OCR, password health and breach checks all run on-device