Building in the open
What's new
VaultWell is being built in the open. Here are the milestones so far, before release.
VaultWell isn't released yet. This is a short log of milestones reached while building it. Dates will appear here once there are releases to date.
Milestones so far
- Format v2 with Argon2id and hardware binding. Paths and phrases are stretched with Argon2id (64 MiB, two passes) and bound to the Secure Enclave or Android Keystore.
- Chunked encryption. Items are encrypted in 1 MiB AES-GCM chunks, so large videos play and seek smoothly.
- One format on both platforms. iPhone and Android read and write the same vault format, checked against shared test vectors.
- Encrypted backups that restore on iPhone or Android.
- Read-only shares with limits on opens, expiry and saving out.
- Duress vault, intruder snapshots and disguise icons.
- 33 languages, including right-to-left, now in native-speaker review.
- Light and dark appearance, larger text and screen reader labels.
Next
- An independent security audit.
- Translation review, security wording first.
- Release on the App Store and Google Play.
Ideas we're considering for later, with no promises: automatic encrypted sync, and live shared vaults. Neither exists today. The full list is on the roadmap.