Encrypted photo vault for iPhone

The private photo vault that opens with a pattern only you know

Velcrypt keeps private photos, videos and documents in encrypted vaults on your iPhone. Draw a pattern on a 5×5 grid to open a vault. Every pattern opens its own vault, and nothing ever leaves your device.

Well Encrypted. Truly Private.

  • AES-256-GCMEvery file encrypted on the device
  • No accountNo sign-up, no servers, no uploads
  • One pattern, one vaultNo list of vaults to discover
  • No Face IDBy design: it can’t be taken from your face

How it works

Three steps to a vault that’s truly yours

Velcrypt is a vault, not a hiding place. Hiding a photo only moves it out of sight. Velcrypt turns it into encrypted data that only your pattern can open.

  1. 1

    Draw a pattern

    Connect at least 6 dots on the 5×5 grid in one continuous line with at least one turn. That pattern now opens its own vault.

  2. 2

    Add what you want to protect

    Import photos and videos from your library or documents from Files. Velcrypt encrypts each one on the device as it comes in.

  3. 3

    Remove the originals

    Importing makes an encrypted copy. Delete the original from Photos and empty Recently Deleted so no readable copy is left behind.

Hidden vaults

Every pattern is its own vault

There is no list of vaults and no “wrong pattern” message. A pattern Velcrypt has never seen just opens an empty vault, so nothing on screen proves other vaults exist. Keep everyday photos behind one pattern and your most private files behind another.

That is what plausible deniability means in practice. You can also keep a believable decoy vault. A duress pattern that silently removes access to the other vaults is planned for Premium. Coming soon

About hidden vaults

Security

Encryption you can read about

Your pattern is stretched into a key with PBKDF2-HMAC-SHA512 (at least 600,000 iterations) and a random salt kept in the iOS Keychain. That key protects a random 256-bit master key for each vault, and every file gets its own key through HKDF. Files are sealed with AES-256-GCM through Apple CryptoKit, and iOS Data Protection is applied on top.

We also publish what Velcrypt does not protect against, because honest limits are part of security.

Read the security model
  • Auto-lock when you leave the app, with a delay you choose
  • App switcher shows nothing of your vault
  • No iCloud copies vaults are excluded from iCloud and computer backups
  • No ads, no tracking of vault content
  • Copy, not move you decide when originals are deleted

Compared

Hidden is not the same as encrypted

How Velcrypt differs from the iPhone Hidden album and from typical lock-screen vault apps.

Velcrypt compared with the iPhone Hidden album and typical vault apps
VelcryptiPhone Hidden albumTypical PIN vault app
Encrypts each fileYes, AES-256-GCMNo separate encryptionVaries, often not documented
Opens with your phone passcodeNo, only your patternYesVaries
Account requiredNoApple Account for iCloudOften
Copies to the cloudNeverYes, with iCloud PhotosOften, as an option
Several separate vaultsYes, one per patternNoSome apps
Reveals that other vaults existNoNot applicableVaries

Details for third-party apps vary by app and version. See the full comparisons.

Frequently asked questions

What is Velcrypt?

Velcrypt is an iPhone app that stores private photos, videos and documents in encrypted vaults on the device. You open a vault by drawing a pattern on a 5×5 grid of dots.

Is the iPhone Hidden album encrypted?

Not separately. The Hidden album keeps photos out of the main library view and can require Face ID, but the photos remain in your library and sync with iCloud Photos like any others. Velcrypt encrypts each file with its own key.

What happens if someone sees me open Velcrypt?

They only learn the pattern they watched. Every pattern opens a different vault, an unknown pattern simply opens an empty vault, and there is no list that reveals how many vaults exist.

Why is there no Face ID unlock?

Biometrics can be used without your consent: someone can hold the phone up to your face. A pattern lives only in your memory, so Velcrypt leaves out Face ID and Touch ID on purpose.

Does Velcrypt need an account or upload anything?

No. There is no sign-up, no server and no upload. Vault content is encrypted and stays on your iPhone, and it is excluded from iCloud and computer backups in the first version.

What if I forget my pattern or lose my phone?

Then that vault cannot be recovered, by you or by us, because no one else holds the keys. Choose a pattern you will remember and keep important originals somewhere safe. An encrypted backup option is planned.

Is Velcrypt free?

There will be a free version and an optional Premium upgrade. Planned Premium items include unlimited items, more vaults, a duress pattern and encrypted backup. Pricing has not been announced.

Which iPhones does Velcrypt support?

Velcrypt is a native iPhone app for iOS 17 or later.

More questions and answers →

Well Encrypted. Truly Private.

Draw a pattern, open a private vault. Your photos, videos and documents stay encrypted on your iPhone, with no account and no cloud.

Coming soon to the App Store

Launching soon for iPhone (iOS 17 or later). Free version, optional Premium.