Encrypted on your iPhone

Every file encrypted on your iPhone. Every key yours.

Many 'vault' apps only hide files behind a PIN screen. VaultBolt encrypts each item before it is written to storage, encrypts the index of names and folders too, and never sends a key to anyone, including us.

IncludedAll plans
In shortAES-256-GCM on the device for every file and the index. Nobody else can open it: not Apple, not a thief, not even VaultBolt. Included on every plan, including Free. Included in the app.

How it works

Encrypted on your iPhone, step by step.

Your unlock becomes a key

Your PIN, pattern or passphrase runs through Argon2id, a memory-hard function that makes guessing slow, mixed with a secret from the Secure Enclave.

That key unlocks the vault key

A random 256-bit vault key is wrapped by your unlock key, so changing your PIN never re-encrypts your library.

Each file gets its own key

Files are sealed in chunks with AES-256-GCM, so damage or tampering is detected and large videos stream without decrypting everything.

Locking forgets the keys

When the app locks or goes to the background, keys are dropped from memory.

Names and folders are encrypted too

The vault index, thumbnails and metadata are encrypted, so a copy of the app's storage reveals no filenames or albums.

Bound to your device

A secret held by the Secure Enclave is part of the key, so a stolen disk image cannot be brute-forced on a fast computer.

No back door

There is no master key and no account. Support cannot open your vault, which is why your recovery phrase matters.

Honest limits

  • Encryption protects stored files, not a file you have opened on screen.
  • A short PIN is weaker than a passphrase against someone with your unlocked, jailbroken device.
  • An independent audit and public whitepaper are planned before launch.

Read the full security model →

FAQ

Encrypted on your iPhone: common questions

What encryption does VaultBolt use?

AES-256-GCM authenticated encryption for file content, thumbnails and the vault index, with Argon2id key derivation and a Secure Enclave-bound secret.

Can VaultBolt see my photos?

No. Files are encrypted on your device with keys that never leave it. There is no VaultBolt account and no copy of your keys on any server.

Is AES-256 secure?

AES-256 is the standard used by governments and banks and has no practical attack. In practice, the strength of your unlock and the safety of your device matter more.

VaultBolt

Your stuff. Locked in.

Get VaultBolt for iPhone and iPad, or see exactly how it works in the interactive demo vault.

Download on theApp Store