What to Look For in a Photo Vault App: 8 Checks to Make

You have photos or documents you’d rather nobody else saw, and the App Store shows dozens of vault apps that all promise the same thing. Most look alike from the outside. These eight checks tell them apart, and most take a few minutes.

Why the checks matter

Your iPhone already encrypts everything stored on it. Apple’s security guide explains that each new file gets its own 256-bit key. That protection is tied to your iPhone’s passcode, though. Anyone who knows the passcode and has the unlocked phone in hand sees what you see.

A vault app is only worth having if it adds a layer that your passcode alone doesn’t open. Some do. Some just put a lock screen in front of ordinary files. The checks below are how you find out which kind you’re looking at.

1. Does it encrypt your files, or just lock the screen?

A lock screen stops someone from tapping into the app. Encryption makes the files unreadable without the key, even to someone who copies them off the phone.

What to look for:

1. The app names its method, such as AES-256 for files, and says how it turns your password into a key (PBKDF2, for example).
2. It says encryption happens on your iPhone, before anything is saved.
3. It covers more than the photo itself. File names, dates and thumbnails can reveal a lot, and they should be encrypted too.

Be wary of vague wording and big adjectives instead of specifics. A vault with nothing to hide about how it works will usually tell you.

2. Does it have its own unlock?

If the vault opens with your iPhone passcode, it protects you from no one who knows that passcode. A partner, a family member or someone who watched you type it gets straight in.

Look for an unlock that belongs to the vault: a separate PIN, password or pattern. Face ID is convenient, but it can be forced, by someone holding the phone up to your face. A good vault lets you turn it off, and ideally lets you put a second password on the things that matter most.

Check what the unlock screen shows, too. If it shows album names or how many albums there are, it’s already told a stranger something.

3. What happens after wrong guesses?

A short PIN has only so many combinations. Without a limit, someone with time can try them all.

Look for a vault that makes you wait longer after repeated wrong guesses, and keeps counting even if the app is closed or the clock is changed. NIST’s guidance for login systems makes limiting failed attempts a requirement, for the same reason.

Some vaults can also erase everything after a set number of wrong guesses. That’s useful if your phone is taken, and risky if a child or a curious friend keeps guessing, so it should be your choice to turn on, not a default.

4. Does it need an account, or the internet?

If a vault needs you to sign up with an email to open your own photos, ask where your photos and your password are going. An account usually means a server, and a server is one more place something can leak or be handed over.

A quick test:

1. Put your iPhone in Airplane Mode from Control Center.
2. Open the vault, unlock it, view a photo and add a new one.

If any of that fails, the app depends on someone else’s computer. A vault built for privacy should do all of it with no connection at all.

5. How do you get back in if you forget?

This is the check most people skip, and the one that matters most on a bad day.

There are two honest answers, and one worrying one:

• A recovery code or phrase that only you hold. If you lose the password and the code, nobody can get you back in. That’s the price of nobody else having a key.
• No recovery at all. Also honest, but you need to be sure you’ll remember.
• A reset by email or by contacting support. If the company can let you back in, it holds something that opens your files. That may be fine for you, but it isn’t the same as only you holding the key.

Find out which kind the app uses before you put anything important in it. Then write down whatever you need and keep it somewhere safe, away from the phone.

6. If it backs up, does the backup stay encrypted?

If your phone is lost or breaks, a vault with no backup loses everything in it. A backup fixes that, but it can also undo the privacy you were after.

Ask three questions:

1. Are files encrypted on the iPhone before they’re uploaded, so the backup is unreadable to whoever stores it?
2. Where does the backup go: your own iCloud, or the app maker’s servers?
3. Is backup optional?

It’s worth knowing that standard iCloud encrypts your data, but Apple holds the keys for Photos, iCloud Drive and iCloud Backup unless you turn on Advanced Data Protection. A vault that encrypts files itself before they reach iCloud doesn’t rely on that setting.

7. How does it make money?

A vault has to pay for itself somehow. Ads usually mean advertising code running inside the app that holds your most private photos, and that code reports back to other companies.

What to check:

1. Scroll to App Privacy on the app’s App Store page. Look for anything under Data Used to Track You or Data Linked to You.
2. Read the privacy policy for the words “advertising”, “analytics” and “third parties”.
3. Look at the price. A clear one-time price or subscription is easier to judge than an app that’s free with ads and in-app offers.

Apple notes that the privacy information on the App Store is self-reported by the developer. It’s worth reading, but it’s not a guarantee.

8. Can you leave easily, at full quality?

Before you move years of photos into an app, make sure you can get them out again.

• Does it keep the original file, at full resolution, or a smaller copy?
• Can you save a photo back to Photos, or a document to Files, when you need to?
• If you stop paying, can you still open what you saved, or is it held back until you pay?

Also check what happens to the originals. After you add photos to a vault, the copies in Photos are still there until you delete them, and deleted photos wait in Recently Deleted for up to 30 days. Our guide to whether the iPhone Hidden album is safe covers that step.

What no vault app can protect against

Even a well-built vault has limits, and an honest one will say so:

• An open, unlocked screen. If the vault is open and someone takes your phone, they see what’s on the screen.
• A compromised iPhone. A jailbroken phone, or one with spyware on it, weakens every app’s protections.
• A weak unlock. A short PIN or a simple pattern can eventually be guessed by someone with a copy of the phone’s storage and a lot of computing time. Longer is better.
• Copies you make yourself. A photo you save back to Photos or share in a message is an ordinary file again.

If you’re worried about someone who is controlling or threatening you, a vault app is only one small part of staying safe. Apple’s Safety Check, in Settings under Privacy & Security, helps you see and cut off what you share with other people. If you’re in danger, contact local emergency services.

Where Silock fits

We built Silock with these checks in mind. It encrypts everything on your iPhone before it’s saved, file names, dates and thumbnails included, and opens with its own PIN, password or pattern. There’s no account and no ads. If you forget your unlock, a 12-word recovery phrase that only you hold is the way back in, and if you lose both, nobody can recover the files. It doesn’t offer decoy vaults or break-in photos.

You can keep different things apart in separate encrypted albums called silos, and give the most sensitive one a password of its own.