Hide Photos & Videos: Vault

Keep the photos, videos, files, and passwords you'd rather keep private locked away in one app — Private Vault. Worried about handing your phone to family or friends and having them stumble onto something private? The built-in "Hidden" album in Photos can be opened by anyone. Real privacy needs a dedicated vault. ■ Highlights 【Full encryption】 ChaCha20-Poly1305 (military-grade, RFC 7539) protects every item. The master key lives only in RAM while the app is unlocked and is zeroed out the moment you lock. Without your password, nobody — including us — can read your data. Zero-knowledge by design. 【Layered lock】 Face ID, Touch ID, and a PIN code. The vault re-locks instantly when you send the app to the background. If you re-enroll your biometrics, the cached key is automatically invalidated. 【Photos, videos, and files】 - Bulk import from Photos library (with optional auto-delete of the original) - Take photos directly inside the app (never written to the camera roll) - Live Photos, HEIC, and 4K video are all supported - Import any file type from the Files app — PDFs, documents, archives, and more — each stored encrypted on-device - Choose whether to keep or strip EXIF / GPS metadata - Originals and thumbnails are both encrypted at rest, on-device only 【Password manager】 - Store logins, passwords, and secure notes — all encrypted on-device - Built-in strong password generator - Password strength meter - Have I Been Pwned breach check (see the transparency note below) ■ HIBP breach check transparency The breach check uses k-anonymity. We never send your password or its full hash to any server. Only the first 5 hexadecimal characters of the SHA-1 hash leave your device, queried against api.pwnedpasswords.com; the candidate list returned by the server is matched on-device. No full hash, no plaintext password, and no other data is transmitted. ■ Privacy commitments - Vault contents (photos, videos, files, passwords, master key material) are encrypted on-device and never sent to our servers — optional iCloud sync (off by default) stores only encrypted blobs in your own private iCloud - No ads - No account required (your vault data stays on your device by default) - We use Firebase Crashlytics to monitor stability and improve features. This service never includes vault contents, file bytes, passwords, filenames, or anything you store - Password breach check uses Have I Been Pwned with k-anonymity (only the first 5 hex chars of SHA-1 leave your device) - Built on swift-crypto (Apple-maintained) ■ Who this is for - People with photos they'd rather keep out of casual view - Anyone managing passwords in Notes or messaging apps - Anyone who needs a private, encrypted place for sensitive documents - Parents who occasionally hand the phone to a child - Anyone uneasy about putting sensitive data in the cloud