Are photo vault apps safe?

“Vault” sounds reassuring, but the word says nothing about how an app actually stores your files. Some vault apps encrypt everything with a key derived from your secret. Others keep your photos in a regular folder and put a keypad in front of it. You can’t inspect the code, but you can learn a lot from what an app tells you and what it asks for.

Use the checklist below on any vault you’re considering, including ours.

The checklist

1. Does it explain its encryption?

Encryption at rest means the files are stored in scrambled form and can only be read with the right key. A safe vault tells you, in plain language, which algorithm it uses (for example AES-256), how the key is derived from your PIN, password or pattern, and where keys are stored.

Vague phrases like “bank-level security” without specifics are a warning sign. So is any description that only talks about the lock screen. See AES-256 encryption explained for what solid answers look like.

2. Is the secret separate from your device passcode?

If the vault opens with Face ID and falls back to your iPhone passcode, anyone who knows that passcode can get in, which is the same limitation as the built-in Hidden album. A separate PIN, password or pattern is a meaningful layer.

3. What does the privacy label say?

On the app’s App Store page, scroll to App Privacy. Apple groups the developer’s declarations into data used to track you, data linked to you, and data not linked to you. For a vault, you’d ideally see Data Not Collected or a short, explainable list. Labels are self-reported, but a long list of identifiers, usage data and location in a privacy app should make you pause.

4. Does it require an account?

An email-based account isn’t inherently unsafe, and it often enables backup. But it means the company knows who you are and that you use a vault, and it adds an account that can be breached or phished. If you don’t need cloud features, a vault without an account avoids that.

5. Does anything go to the cloud?

Find out whether your photos ever leave the phone. If there is a cloud backup, check whether it’s end-to-end encrypted (only you hold the key) or merely encrypted on the company’s servers. A simple practical test is described in our no-account guide: use the app in Airplane Mode and see what stops working.

6. Is it funded by ads?

Ad-supported apps usually embed third-party advertising SDKs, which collect device-level data and make network requests you don’t control. That doesn’t mean your photos leak, but it widens the number of parties involved. The privacy label usually reflects this under tracking.

7. What happens when you uninstall it?

Apps on iOS store their files in their own private container. When you delete an app, iOS deletes that container, and with it any vault content stored only on the device. That is good for privacy and dangerous for your data. Before uninstalling any vault, export what you want to keep, and check whether the app has a cloud copy you also need to delete.

8. How does recovery work?

Ask what happens if you forget your secret or lose your phone. Possible answers:

• Email or account recovery: convenient, but it means someone other than you can grant access.
• A recovery key or backup you control: strong, if you store it carefully.
• No recovery: the most private option, and the least forgiving.

None of these is right for everyone. What matters is that the app tells you honestly. See forgot your vault pattern? for how we handle this.

9. What does it do with the originals?

Most vaults copy a photo when you import it. The original stays in Photos, and possibly in iCloud, until you delete it, and then sits in Recently Deleted for about 30 days. A good app reminds you of this; a careless one lets you believe the photo has moved. Our guide to deleting originals after import covers the clean-up.

Red flags at a glance

Signal	Why it matters
No mention of how files are encrypted	May be a lock screen only
Opens with device passcode as fallback	Anyone with your passcode gets in
Long privacy label with tracking	Third parties involved in a privacy app
Account required for basic use	Your identity is linked to your vault
Cloud backup without end-to-end encryption	Company could access copies
Promises of absolute, unbreakable security	No honest security product promises that

What no vault can protect against

Even a well-built vault has limits, and an honest app will say so. It can’t stop someone watching you enter your secret, malware on a jailbroken phone, a person you hand your phone to while the vault is open, or someone photographing your screen. And it can’t reach copies that exist elsewhere: in Photos, in iCloud, in a chat, or on the phone of someone you sent the picture to.

How Velcrypt answers the checklist

For transparency, here is how our own app measures up:

• Encryption: AES-256-GCM via Apple CryptoKit. Keys come from your pattern via PBKDF2-HMAC-SHA512 with at least 600,000 iterations, each vault has its own random master key, and iOS Data Protection is applied on top. Details on our security page and encryption feature page.
• Secret: a pattern on a 5×5 grid, separate from your device passcode; no Face ID by design.
• Account and cloud: none. No sign-up, no servers, no uploads (offline, no account).
• Recovery: none in the first version. Vault content is excluded from iCloud and computer backups, so losing the phone or forgetting the pattern means the content can’t be recovered. An encrypted backup option is planned.
• Originals: importing copies an item; you remove the original yourself.

If a vault you’re considering can answer these points as clearly, that’s a good sign. For a broader comparison of options, see the best private photo vault apps for iPhone.