How photo vault apps work

A vault app looks simple from the outside: a lock screen, then a grid of photos. Underneath, a photo goes on a short journey. Following one photo through that journey is the easiest way to see what a vault does, and where different apps cut corners.

1. The photo comes in

You pick a photo from your library, take one with the camera, or open a file. The app reads it and makes its own copy.

This is the first place things go wrong. On both iPhone and Android, most vault apps copy rather than move, because apps usually cannot quietly delete from your library. The original stays in Photos or Gallery until you delete it, and then sits in Recently Deleted for up to about 30 days. A vault cannot protect a copy it does not hold.

2. A key is made

When you unlock, the app turns your PIN, password or pattern into an encryption key. A careful app does this with a deliberately slow function such as Argon2, so that guessing codes one after another takes a very long time. Some apps also tie the key to secure hardware in the phone, so the stored data cannot simply be copied off and attacked elsewhere.

A weaker app skips this step. It stores your code, checks it, and opens a folder. That is a hiding place with a lock screen, not a vault.

3. The photo is encrypted

With the key, the app scrambles the photo, usually with AES, and writes the result to its private storage. Larger files are often encrypted in chunks so videos can play without decrypting everything at once. Thumbnails and notes should be encrypted too; some apps forget them.

4. You open it later

You unlock, the key is made again, and the app decrypts what you view, in memory, while you look. When the app locks, by timer or when you leave it, the key is dropped. Good apps also hide their content from the app switcher preview.

5. The phone changes

Phones get lost, break and get replaced. A vault needs an answer for that: an encrypted backup you can restore, and a way back in if you forget your code. If an app can reset your code with an email, the company holds a way to your data. If it cannot, you need a recovery phrase or similar, kept somewhere safe.

Extras you may see

Many vault apps add features on top of the basic journey. A few are worth understanding:

• Decoy or hidden vaults. More than one vault, each with its own code, so opening one reveals nothing about the others. Only meaningful if the app never shows a count or list.
• Intruder photos. After wrong attempts, some apps silently take a front-camera photo. Useful as a signal, not as protection.
• Disguised icons. The app appears as something ordinary. This hides the app, not the photos.
• Duress codes. A code that erases data. A serious step with real trade-offs.
• Sharing. Sending a copy to someone else. Once it is on their screen, they can photograph it, so no app can fully control what happens after.

None of these replace the core: a key made carefully from your code, and content encrypted with it.

What separates a vault from a hiding place

Ask one question: if someone got past the lock screen by another route, would they see your photos? In a hiding place, yes. In an encrypted vault, they would see scrambled data. The vault app checklist turns that into tests you can run.

For reference, VaultWell follows the careful path at each step: Argon2id stretching of your traced path, a hardware-bound key, AES-GCM in chunks, auto-lock, encrypted .vwbackup files, and a recovery phrase.

Questions

Related

• AES and Argon2 explained simply
• How to delete photos permanently