# Revault

> Revault is a local-first encrypted vault for photos, videos, documents and personal files, built for iPhone and Android. The mobile apps need no Revault account: vaults stay on your device unless you turn on optional private iCloud or Google Drive sync, Pro Revault Cloud, an encrypted share or an export. Files, names and previews are encrypted on your device with AES-256-GCM. The browser vault is a separate web app with a passkey account and its own cloud storage. The iOS and Android apps are coming to the app stores; the web app works today. Revault is an independent project, not affiliated with Revolut or similarly named products, and has not undergone an independent security audit.

Every page is also available as Markdown: request it with `Accept: text/markdown`, or add `.md` to its path (`https://revaults.app/index.md` for the home page, `https://revaults.app/de/security-model.md` for a translation). Pages are translated into 55 languages under a locale prefix such as `/de` or `/ja`; the sitemap lists every page and translation: https://revaults.app/sitemap.xml

## Core
- [Security model](https://revaults.app/security-model): Cryptographic design (PBKDF2-HMAC-SHA-256 at 600,000 iterations, AES-256-GCM, HKDF-SHA-256), recovery, limits and what the service can see
- [Security & architecture](https://revaults.app/security): How Revault protects files, and where protection ends
- [How it works](https://revaults.app/features): Feature overview
- [Download](https://revaults.app/download): iPhone, Android and web app availability
- [Changelog](https://revaults.app/changelog)
- [Support](https://revaults.app/support): Quick answers and a form to contact customer support (support@revaults.app)
- [Privacy Policy](https://revaults.app/privacy)
- [Terms of Service](https://revaults.app/terms)
- [Attribution](https://revaults.app/attribution): Credits for the icons and typefaces used on the website

## Features
- [Screenshot and recording protection](https://revaults.app/features/screen-capture-protection): Share with capture safeguards: Android blocks screenshots and recording; iOS hides recordings and closes view-only shares after screenshots.
- [Private vaults without an account](https://revaults.app/features/private-vaults): Create separate encrypted spaces on your phone. Each pattern opens only its matching vault, without a Revault account or sign-up.
- [Optional private cloud sync](https://revaults.app/features/private-cloud-sync): Choose private iCloud or Google Drive sync, or Pro Revault Cloud for iPhone and Android together. Keep other vaults entirely local.
- [Encrypted backups and recovery](https://revaults.app/features/encrypted-backups): Export a portable encrypted .qvault backup and keep its recovery key separately. Restore your files without a Revault account.
- [Private camera and file imports](https://revaults.app/features/private-camera-imports): Take photos and videos inside an unlocked vault, import selected items from Photos, or send files from another app’s share sheet.
- [Optional photo and video optimization](https://revaults.app/features/media-optimization): Make new photo and video imports smaller before encryption. Choose optimization settings separately for each vault.
- [Private search, tags and favourites](https://revaults.app/features/search-tags-favourites): Find files inside an unlocked vault using names, tags and categories. Keep favourites close and organize files into encrypted folders.
- [Secure transfers between iPhone and Android](https://revaults.app/features/phone-transfer): Move a vault to another phone with an encrypted transfer file and a separate transfer key, including when switching between iOS and Android.
- [Automatic vault locking](https://revaults.app/features/automatic-locking): Lock immediately when the app goes into the background, with a configurable inactivity timeout that defaults to 60 seconds per vault.
- [Safe Exit for sensitive situations](https://revaults.app/features/safe-exit): Designate a vault whose pattern opens that space while removing other vaults’ local access and data from this device.
- [Optional encrypted vault activity logs](https://revaults.app/features/vault-activity): Review interactions with a vault on this device through an optional encrypted activity history, controlled separately for each vault.
- [Optional break-in photo alerts](https://revaults.app/features/break-in-alerts): Opt a vault into encrypted local photo alerts after repeated failed patterns. Review the evidence only after unlocking that vault.
- [App icons and a personal in-app name](https://revaults.app/features/app-appearance): Choose an available alternate icon and personalize the name shown inside Revault, using appearance options supported by your platform.
- [Bring your own S3-compatible storage](https://revaults.app/features/s3-compatible-storage): Use the web app to upload individual encrypted file backups directly from your browser to an S3-compatible bucket you control.
- [Secure photo vault app, encrypted on-device](https://revaults.app/features/secure-photo-vault): An account-free mobile photo vault that encrypts photos, videos, filenames and thumbnails on-device. Choose private previews, recovery and optional sync.
- [Remove metadata from photos, videos and PDFs](https://revaults.app/features/metadata-stripping): Remove hidden location, camera details and document properties on your phone. Choose an item or set a default for new vault imports.
- [A private photo editor inside your vault](https://revaults.app/features/photo-editor): Crop, rotate and flip photos, then adjust brightness and contrast without leaving your unlocked vault or uploading to an editing service.
- [Secure passport storage, on your terms](https://revaults.app/features/passport-storage): Keep an encrypted copy of your passport away from your camera roll. Revault encrypts passport scans on your device before upload, with keys only you hold.
- [Private storage for card records, not card payments](https://revaults.app/features/credit-card-storage): Keep card records and redacted statements in an encrypted vault. Revault is a private document vault, not a payment wallet, and saves only what you add.
- [Encrypted document storage for the papers that matter](https://revaults.app/features/sensitive-document-storage): An encrypted document storage app for passport copies, statements and scans. Files are encrypted on your device with AES-256-GCM before they are uploaded.
- [Secure file sharing between iPhone and Android](https://revaults.app/features/secure-file-sharing): Share encrypted files or a vault snapshot with a separate secret. Keep your personal vault keys private across iOS and Android.
- [Expiring file sharing with access limits](https://revaults.app/features/expiring-file-sharing): Share files that stop working on a deadline. Set an expiry, limit access sessions and add a timer after first open. Recipients need the app, no account.

## Free tools
- [All free tools](https://revaults.app/tools): Browser tools for photos, passwords, links and text. Each runs on your device and uploads nothing.
- [Link cleaner](https://revaults.app/tools/link-cleaner): Remove utm_ tags, fbclid, gclid and other tracking parameters from links before you share them. It runs on your device and uploads nothing.
- [Image resizer](https://revaults.app/tools/image-resizer): Resize a photo to exact pixels or a percentage, keep its proportions and save it as JPEG, PNG or WebP. It runs on your device and uploads nothing.
- [Image converter](https://revaults.app/tools/image-converter): Convert images between JPEG, PNG and WebP, several at a time. It runs on your device and uploads nothing. Camera metadata is dropped.
- [PNG to WebP converter](https://revaults.app/tools/png-to-webp): Convert PNG images to WebP with adjustable quality and keep transparency. It uploads nothing and runs on your device. Needs Chrome, Edge or Firefox.
- [WebP to JPG converter](https://revaults.app/tools/webp-to-jpg): Convert WebP images to JPG for sites and apps that refuse WebP. Transparent areas get a background colour. It runs on your device and uploads nothing.
- [WebP to PNG converter](https://revaults.app/tools/webp-to-png): Convert WebP images to PNG and keep transparency. PNG is accepted almost everywhere. It runs on your device and uploads nothing.
- [Image compressor](https://revaults.app/tools/image-compressor): Make a photo smaller by quality or to a file size you choose, such as under 200 KB. Compare before and after. It runs on your device and uploads nothing.
- [Image brightener](https://revaults.app/tools/image-brightener): Lighten a dark photo with exposure, shadows, midtones, contrast and auto levels, and see it change live. It runs on your device and uploads nothing.
- [Image cropper](https://revaults.app/tools/image-cropper): Crop a photo to a free shape or 1:1, 4:5, 3:2, 16:9 or 9:16, rotate or flip it, and set exact pixels. It runs on your device and uploads nothing.
- [Passport photo maker](https://revaults.app/tools/passport-photo): Crop a photo to passport size for the US, EU, UK, Canada, China, India or Australia, then save a 300 dpi print file and a 4×6 in sheet. It uploads nothing.
- [Blur faces & redact photos](https://revaults.app/tools/blur-faces): Hide faces, plates, documents or text in a photo with a solid fill, pixelation or blur. You choose the areas. It runs on your device and uploads nothing.
- [ID copy watermark](https://revaults.app/tools/id-watermark): Repeat the recipient and date across a scan of your ID or passport so a shared copy is harder to misuse. It runs on your device and uploads nothing.
- [Photo metadata viewer & remover](https://revaults.app/tools/metadata-remover): See the location, camera and hidden data inside a JPEG, PNG or WebP, then remove it without re-encoding the picture. It uploads nothing.
- [Photo location checker](https://revaults.app/tools/photo-location-checker): Find out whether a photo hides GPS coordinates before you share it, and download a copy without them. It runs on your device and uploads nothing.
- [QR code generator](https://revaults.app/tools/qr-code-generator): Make a static QR code for Wi-Fi, a contact card, a link, text, email, a phone number or SMS. No sign-up. It runs on your device and uploads nothing.
- [Password & passphrase generator](https://revaults.app/tools/password-generator): Make a strong random password or a passphrase of random words. It uses your browser's cryptographic random numbers and uploads nothing.
- [Password strength checker](https://revaults.app/tools/password-strength-checker): Estimate how long a password would take to guess, with plain feedback on weak patterns. It runs on your device and uploads nothing.
- [Random generator](https://revaults.app/tools/random-generator): Generate UUIDs (v4 and v7), roll dice, flip coins, pick numbers and make hex or base64url tokens. It runs on your device and uploads nothing.
- [Encrypt text & files](https://revaults.app/tools/encrypt-files): Lock text or files with a passphrase using AES-256-GCM. It runs on your device, uploads nothing and uses a documented file format.
- [File hash calculator](https://revaults.app/tools/hash-calculator): Check a download against its published checksum. Calculate MD5, SHA-1, SHA-256 and SHA-512 of a file or text. It runs on your device and uploads nothing.
- [Remove personal details from text](https://revaults.app/tools/text-redactor): Find and mask email addresses, phone numbers, card numbers, IBANs, IP addresses and secrets in pasted text. It runs on your device and uploads nothing.
- [PDF metadata remover](https://revaults.app/tools/pdf-metadata-remover): See the author, title and software details stored in a PDF, then remove them. It runs on your device and uploads nothing.
- [HDR photo converter](https://revaults.app/tools/hdr-converter): Beta: turn a photo into an Ultra HDR JPEG that lifts highlights on HDR screens. It runs on your device and uploads nothing.

## Comparisons
- [All comparisons](https://revaults.app/compare)
- [Revault vs. Proton Drive](https://revaults.app/compare/proton-drive)
- [Revault vs. Cryptomator](https://revaults.app/compare/cryptomator)
- [Revault vs. Ente Locker](https://revaults.app/compare/ente-locker)
- [Revault vs. Keepsafe](https://revaults.app/compare/keepsafe)
- [Revault vs. Private Photo Vault](https://revaults.app/compare/private-photo-vault)
- [Revault vs. LockMyPix](https://revaults.app/compare/lockmypix)
- [Revault vs. Vaultaire](https://revaults.app/compare/vaultaire)

## Journal
- [All articles](https://revaults.app/blog): The journal index, including new privacy and security articles published daily
- [How to set up a private vault](https://revaults.app/blog/a-private-space): Choose web or mobile, draw a pattern that isn’t obvious, save your recovery key, add your first files and make an encrypted backup.
- [Your recovery key and your backup do different jobs.](https://revaults.app/blog/recovery-keys-and-backups): One opens the lock. The other carries your encrypted files. Keep both, in different places.
- [How Revault encrypts files up to 1 GiB](https://revaults.app/blog/large-files-small-chunks): How bounded encryption chunks make room for files up to 1 GiB without holding the whole file in memory.
- [How to store a passport copy securely](https://revaults.app/blog/how-to-store-a-passport-copy-securely): Where to keep a passport scan, why your camera roll is a risky place, what to do if your phone is lost, and a short checklist to run before you travel.
- [How to store credit card details safely](https://revaults.app/blog/how-to-store-credit-card-details-safely): What card details are safe to keep, what never to store, why a card photo is risky, and what to do if your phone is lost. A practical, honest guide.
- [How to share files securely between iPhone and Android](https://revaults.app/blog/how-to-share-files-securely-between-iphone-and-android): Share encrypted files or a vault snapshot with a separate secret. Keep your personal vault keys private across iOS and Android.
- [Expiring file links and self-destructing shared vaults explained](https://revaults.app/blog/expiring-file-links-and-self-destructing-vaults): Set a deadline, limit access sessions, and start an optional self-destruction timer after first access. Share private files with a defined access window.