Vaultic

Your vault.
Your device.
Nobody else.

Vaultic keeps your photos and PDFs encrypted on your iPhone with AES-256. No cloud. No account. No servers — ever.

Download on the App Store See how it works
🔒 AES-256-GCM 📵 Zero network requests 🚫 No account needed 🇺🇸 Made with ❤️
Features

Everything you need.
Nothing you don't.

Vaultic is designed to be simple, secure, and completely offline.

🛡️

AES-256 Encryption

Every file is encrypted with AES-GCM before touching your disk. Each blob gets a unique random nonce — no two files look the same.

📵

Truly Offline

Zero internet requests. No backend, no analytics, no telemetry. A build-time script fails the build if any networking API is ever added.

🎭

Decoy Vault

A second PIN opens a separate, empty vault. Useful if someone forces you to unlock. Your real vault stays hidden.

✅

Verified Writes

Every import is encrypted, re-read, and SHA-256 verified before you're offered the option to delete the original. Nothing is lost silently.

📲

Device Transfer

Move your vault to a new iPhone over local Wi-Fi — no cloud, no cable, no account. Both devices confirm a pairing code first.

♻️

Recently Deleted

Deleted items stay in a 30-day holding bin before permanent removal — matching the grace period Apple provides in the Photos app.

🔑

Recovery Key

Set up a 24-word phrase as a backup. If you ever forget your PIN, the recovery key is your only way back in — by design.

💊

Vault Health

A background integrity job silently re-decrypts and re-hashes every item to detect corruption before you notice it.

🗂️

Albums

Organize photos and PDFs into custom albums with optional per-album PIN locks. Pro feature.

Security Model

Open, verifiable, uncompromising.

We don't ask you to trust us. Here's exactly how it works.

  • AES-GCM 256-bit encryption for every file. Unique nonce per blob. Authentication tag failure = wrong PIN.
  • PBKDF2-HMAC-SHA256 with 200,000 iterations to derive the wrapping key from your PIN.
  • Master key never stored in cleartext. Wrapped in the iOS Keychain under kSecAttrAccessibleWhenUnlockedThisDeviceOnly.
  • 10-attempt wipe. Ten consecutive wrong PINs permanently delete the master key. No recovery without your phrase.
  • Privacy overlay covers the UI in the App Switcher. What you have stays private.
  • Auto-lock zeroes the in-memory master key when the app backgrounds. Configurable delay.
# On-disk format for every encrypted blob
nonce[12] || ciphertext || tag[16]

# Master key derivation
salt ← SecRandomCopyBytes(16)
wrapping_key ← PBKDF2(PIN, salt, 200_000)
wrapped ← AES-GCM.seal(master_key, wrapping_key)

# Keychain storage
kSecAttrAccessible:
  WhenUnlockedThisDeviceOnly
kSecAttrSynchronizable: false
Vaultic Pro

Go further with Pro.

One-time or subscription — your choice. Free tier is fully functional for everyday use.

✨ Vaultic Pro

Unlock advanced features for power users and anyone who wants extra peace of mind.

☁️ Encrypted iCloud backup 📂 Custom albums 📄 PDF imports up to 2 GB ⏱ Custom auto-lock 🎨 Custom app icon 🚨 Panic gesture 🔄 Always-free restore
Get Pro — from $5.99/month