ENCRYPTED DOCUMENT LOCKER · iOS, ANDROID & WEB

Revault vs. Ente Locker

Ente Locker organizes important documents and information around an encrypted cloud account. Revault starts with independent local vaults and makes syncing optional. Both encrypt before upload, but account recovery, sharing and cross-device access follow different models.

Reviewed October 28, 2026 · Sources below

The feature breakdown

Encryption, accounts, storage, recovery and everyday use
What matters	Revault	Ente Locker
Platforms and purpose	Native mobile vaults for photos, videos and files, plus a separate web app. Mobile store availability depends on release.	Available on iOS, Android and the web for documents, credentials, notes and important family information. [1]
Account requirements	No Revault account, email, or registration on mobile. Optional sync uses your Apple or Google account. The web app has a separate passkey account.	Sign up for an Ente account or use an existing one. Ente Photos, Auth and Locker share account credentials, while their content remains separate. [3]
Published cryptography	AES-256-GCM authenticated encryption, random vault master keys, PBKDF2-SHA-256 key wrapping and HKDF-SHA-256 streaming file keys.	Locker documents XChaCha20 and XSalsa20, Poly1305 authentication and Argon2id key derivation through libsodium. It encrypts titles, files, collections and metadata before upload. [2]
Device syncing	Local by default. Each vault independently opts into private iCloud on iOS or Google Drive appDataFolder on Android. Cloud stores remain separate across platforms. A newly connected device enrolls only the vault authenticated by its recovery key.	Encrypted cloud data is available across supported Locker apps through the same Ente account. [1]
Recovery	A vault recovery key and an available encrypted cloud copy or backup. Support cannot bypass the encryption; device patterns and unlock secrets do not sync.	A 24-word account recovery key can restore access after a forgotten password. Existing signed-in devices and previously configured Legacy recovery provide documented alternatives. [3]
Sharing	Independently encrypted file or vault snapshots. Controlled server shares have an expiry, optional access cap and view-only setting. Invitation links omit the separate decryption secret. Saved copies and screenshots cannot be recalled.	Collections can be shared with Ente users; public item and collection links open in a browser without an account. Public links embed their decryption key in the URL. [4]
Family continuity	Share an independent encrypted snapshot and send its secret separately. Keep recovery instructions and backups yourself; there is no trusted-contact account recovery.	Legacy supports trusted contacts and recovery kits, with notifications and a waiting period during which unauthorized recovery can be blocked. [5]
Security review	The repository describes its cryptography and threat model. Revault has not received an independent security audit.	Ente links to external security audits in its encryption documentation. Review the linked reports and scope rather than assuming every Locker feature was separately audited. [2]

CONSIDER REVAULT WHEN

A vault that starts on your device.

You want to start offline without registering, keep vaults isolated by pattern and decide separately which vaults use your native cloud.

CONSIDER Ente Locker WHEN

A different workflow fits better.

You want the same encrypted document account on iOS, Android and the web, collection sharing, and planned access for trusted contacts through Ente Legacy.

Know the tradeoffs.

Ente Locker offers an account-based cross-platform cloud and documented family recovery features. Revault keeps iCloud and Android Drive separate and requires recovery keys or an explicit encrypted transfer. Revault has no equivalent automatic Legacy-contact recovery service.

No app can protect unlocked files from a compromised device. Exporting a decrypted file creates a copy outside the vault; deleting access cannot recall copies someone already saved. Keep recovery secrets and tested backups separately.

Revault’s security model

Sources & scope

Primary documentation checked on October 28, 2026. Comparisons describe the documented personal product, not every enterprise plan or add-on. No price ranking is included because pricing varies by region and store.

Revault statements describe the implementation in this project; native store availability depends on release. Revault has not undergone an independent security audit. Ente Locker is a trademark of its respective owner. No affiliation or endorsement is implied.