Feature
Path encryption: your path is the key
Each vault opens with a path you trace across a honeycomb. That path is turned into the key that encrypts the vault.
What it is
VaultWell has no PIN and no password field. Instead, you open a vault by tracing a path across a small honeycomb of 37 cells, which we call the comb. The path is not just a gate in front of your files. It is the starting point for the key that encrypts them, so without the path the files are unreadable.
Every vault has its own path. One path opens one vault, and a path that matches nothing simply looks wrong.
How to use it
- Open VaultWell for the first time and tap Get started.
- Trace a path of at least eight cells. Cells can't be used twice in one path.
- Watch the strength meter under the comb. It moves from weak to strong as you trace, with a short hint.
- Trace the same path again to confirm it, then name the vault.
- Next time, open the app and trace the path. That's it.
How it works under the hood
The order of the cells you touch is turned into a short string of bytes. VaultWell runs that through Argon2id, a slow, memory-hungry function (64 MiB of memory, two passes), so each guess costs real time and memory. The result is then mixed with a secret held in your phone's security hardware: the Secure Enclave on iPhone, or the Android Keystore (StrongBox where available). Only then does it become the key that unlocks the vault's own random master key.
Because of that hardware step, the key can only be worked out on the phone that made it. A copy of the app's files taken to another computer can't be tested against guesses there.
Honest limits
- A short or obvious path is easier to guess or to watch over your shoulder. Use the meter, and trace where others can't see.
- If you forget the path and have no recovery phrase, nobody can open the vault. Not even us.
- A path protects data at rest. It can't protect what's on screen while a vault is open.
Questions
How long should my path be?
At least eight cells, and longer is better. Paths that turn back on themselves and skip around are stronger than straight lines. The meter gives you live feedback.
Can I change my path later?
Yes. You can set a new path for a vault from its settings. Your recovery phrase keeps working after the change.
What happens if I trace a wrong path?
The comb tells you the path doesn't match. It can't tell you whether you were close, and it doesn't say whether any vault exists for that path.
Is the path stored anywhere?
No. Only a key derived from it is used, and the vault's master key is stored encrypted under that derived key.