RevaultA secure photo vault app that encrypts photos and videos on your device with AES-256-GCM. No account on mobile. Store apps coming; the web app works today.
Download RevaultSecurity modelRevault is a photo vault for iPhone, Android and the web. Photos and videos are encrypted on your device with AES-256-GCM before they are stored, along with their filenames and thumbnails. Each vault opens with its own pattern, and you keep the recovery key, so there is no master key on our side to hand over or leak.
The native iOS and Android apps need no Revault account, email or sign-up, and keep vaults on your device unless you turn on private iCloud or Google Drive sync. They are not in the App Store or Google Play yet. Until they are, the web app works in your browser with a passkey account.
A vault can’t protect an unlocked phone from malware, and the service can still see file sizes and timestamps. Revault has not had an independent security audit. Everything we do implement is documented in our security model.
Look for a published encryption mode and key design, keys that stay with you, encrypted filenames and thumbnails rather than only the images, a recovery path the provider cannot use, and a clear account of what remains visible. Revault documents each of these in its security model.
Each vault has a random 256-bit AES master key. Your pattern combines with a random device secret to wrap that key. File contents use HKDF-SHA-256 streaming encryption with authenticated AES-256-GCM segments, and filenames, thumbnails and folder information are encrypted on the device too. A separate recovery key wraps the same master key.
Not on mobile. The native iOS and Android apps need no Revault account, email or sign-up. Optional iCloud or Google Drive sync uses your own Apple or Google account. The web app uses a separate passkey account, and encrypted backups move vaults between them.
Yes, on mobile. Use the plus action in an unlocked vault to take a photo or record a video. Captures are encrypted into that vault and do not automatically enter your device gallery. You can also import selected items from Photos; the originals stay where they were.
Optional per-vault optimization can make newly imported photos and videos smaller before encryption, with Original, Balanced and Smaller modes. Files already in the vault and your source files are left untouched. Available device space still applies.
Turn on Break-in Alerts for a vault and, after three unmatched patterns, the app can take a front-camera photo. Alerts are encrypted, stored locally, and never uploaded or added to Photos. Safe Exit lets a designated vault’s pattern open that vault while removing other vaults’ local access from the device.
Create an encrypted share with its own key and send its secret separately. Controlled shares expire at a time you choose within 30 days, can limit access sessions, and can disable export. Recipients open the share in the Revault app without seeing your pattern or recovery key.
The iOS and Android apps are not yet in the App Store or Google Play. The web app works today in your browser, with a passkey account and its own encrypted cloud.
Revault keeps mobile vaults account-free and leaves the recovery key with you. Some photo vault apps favour email-based account access or cloud-first backup instead. The comparisons below set out the differences, with sources.
Take photos and videos inside an unlocked vault, import selected items from Photos, or send files from another app’s share sheet.
Make new photo and video imports smaller before encryption. Choose optimization settings separately for each vault.
Opt a vault into encrypted local photo alerts after repeated failed patterns. Review the evidence only after unlocking that vault.