Get the app

Private photo vault for iPhone and Android

Private photos that open with a pattern only you know.

AlbumVault keeps private photos and videos encrypted on your phone. You open it by drawing a pattern. With Pro, a second pattern can open a separate vault, and nothing on the phone lists how many you have.

Download on the App Store (coming soon)Get it on Google Play (coming soon) Coming soon to both stores
  • No account, no email
  • Free to start
  • We never see your photos or your key

Live demo. It runs in this page and keeps nothing.

How it works

Three steps from install to locked

  1. Draw your pattern

    Unlock by drawing a pattern on a 5×5 grid of dots, using at least 6 dots. Prefer numbers? A PIN of 6 to 12 digits works too. Then write down your 12-word recovery phrase.

  2. Move your photos in

    When you import from your photo library, originals are deleted only after the encrypted copy is safely written, and only after you confirm.

  3. Save an encrypted backup file

    Save an encrypted backup file of a vault to Files, a computer or a drive you trust. Only its 12-word recovery phrase opens it.

Security, plainly

Standard building blocks, named in full

Your pattern or PIN is stretched with PBKDF2-HMAC-SHA512 (600,000 rounds) and combined with a key held in your phone’s Secure Enclave (iPhone) or StrongBox/TEE (Android), so it can only be tried on your phone. Files are encrypted in 1 MB pieces with AES-256-GCM; each file gets its own key, and every piece is checked so a changed or reordered piece is refused.

  • AES-256-GCM
  • PBKDF2-SHA512 · 600k rounds
  • Secure Enclave · StrongBox
  • 12-word recovery phrase
Read how it works

FAQ

Questions people ask

Is AlbumVault safe? Can it be hacked?

Every photo and video is encrypted on your phone before it is saved. Every pattern or PIN attempt goes through a key that stays in your phone’s security chip, so a copy of the vault files cannot be guessed at on another computer. No app can promise it cannot be hacked. AlbumVault cannot protect against malware or a jailbroken or rooted phone running code while the vault is open, against what is on screen or shared out once decrypted, or against someone deleting files they can reach (they can destroy data, not read it).

What happens if I forget my PIN or pattern?

You get back in with the vault’s recovery phrase. Each vault has its own 12-⁠word recovery phrase (BIP-⁠39), shown once. We never see it and cannot reset it. If you forget your pattern, the phrase gets you back in.

Do photos in AlbumVault go to iCloud?

No. Vault files are left out of your phone’s own iCloud or Google device backup. Backing up a vault is a separate, encrypted step you control. Save an encrypted backup file of a vault to Files, a computer or a drive you trust. Only its 12-⁠word recovery phrase opens it. Originals you keep in your photo library still sync with iCloud Photos as usual.

Can someone tell I have a hidden vault?

AlbumVault keeps no list and no count of your vaults, and each vault’s files look alike. AlbumVault does not hide that some private data exists: your phone’s storage settings, and a forensic examiner, can still show that. Deleting is not shredding: a lab that images the phone may recover deleted bytes. Use AlbumVault to keep people out of your photos, not to beat a forensics lab.

Does AlbumVault work on Android?

Yes. AlbumVault is built for iPhone and Android. Move a vault between them with an encrypted transfer file and its recovery phrase.

Is AlbumVault free?

Yes, AlbumVault is free to start. Free: 1 vault, up to 100 photos and 10 videos, encrypted backup file included. Pro: as many vaults as you want, including the guest vault, with no limit on photos and videos. Pro also adds break-⁠in photos and icon disguise.

Do I need an account?

No. There is no AlbumVault server, so there is no AlbumVault account to sign up for. We never have your photos or your keys, so we have nothing to hand over.

What happens if I lose my phone?

Your photos come back only from a backup file you saved. Save an encrypted backup file of a vault to Files, a computer or a drive you trust. Only its 12-⁠word recovery phrase opens it. On the new phone, restore before you set up a vault there: on the welcome screen, tap I have a backup file (on Android, Restore from a backup), pick the file and type the vault’s 12-⁠word recovery phrase.

AlbumVault for iPhone and Android

Your photos, your pattern, your phone

  • Encrypted on this phone
  • Each pattern leads to one vault
  • No account needed
Download on the App Store (coming soon)Get it on Google Play (coming soon) Coming soon to both stores
See what it does
AlbumVault on Android: the Albums screen with Protection active, encrypted on this phone, and four albums