Store
Accounts, identity, documents, digital assets, recovery keys, photos, audio, video and private records.
Vault · Apple ecosystem
The important things belong to you.
Not a phone holding your secrets, but an encrypted safe that remains unreadable without its key. Your data can go to the cloud. Your key does not.
On-device encryptionUser-held 12-word phrasePrivate iCloud sync
AES-256-GCM
KEYS STAY WITH YOU
One safe. Four jobs.
A private digital safe,
not another password tool.
One coherent path for storing, protecting, recovering and passing on the records that matter.
Protect
AES-256-GCM encryption with password and Face ID protection for everyday access.
Recover
A sovereign 12-word recovery phrase keeps final recovery authority with you.
Pass on
Grant selected, read-only ciphertext records to trusted people through explicit acceptance.
THE SECURITY MODEL
Your iPhone is a way to open the safe.
It is not the safe itself.
How it works
Encrypted on device.
Then synced as ciphertext.
Your important records
Structured data and attachments enter the encryption flow on your device.
→
Authenticated encryption
AES-256-GCM protects confidentiality and detects tampering.
→
Cross-device sync
CloudKit stores ciphertext. The 12-word phrase is not written to CloudKit.
A different category
The missing layer between password managers and cloud drives.
| Category | Best at | Typical boundary | Vault |
|---|---|---|---|
| Password managers | Credentials and autofill | Password-centric workflow | Identity, files, private records and recovery information together |
| Encrypted drives | Files and folders | File-centric structure | Structured encrypted records plus attachments |
| Apple Legacy Contact | Apple Account data access | Not an app ciphertext key | Selected read-only records with explicit acceptance |
| Vault | Store, protect, recover and pass on | No browser autofill; lost phrase may mean lost access | User-held decryption and recovery authority |
Direct answers
Frequently asked questions
Is Vault a password manager?
No. Vault is designed for long-term storage of accounts, identity records, documents, recovery information and private files. Browser autofill and password generation are not its core workflow.
Where is my data stored?
Content is encrypted on device before ciphertext is optionally synced through Apple CloudKit. The 12-word recovery phrase is not written to CloudKit.
Can the developer recover my vault?
The design does not give the recovery phrase to the developer. Without the correct phrase, the developer cannot decrypt or reconstruct vault content for the user.
Your private digital safe
The important things deserve a real safe.
Keep final decryption and recovery authority in your hands.
Download on the App Store