VaultItGoogle Play coming soon

Only you can open it.

VaultIt seals your photos, videos and documents behind a pattern only you know. Without it, this is all anyone gets.

Google Play coming soonAndroid 8 and up. Free to start. No account.
what everyone else sees

Draw the pattern to open it. Try a wrong one first.

No accountThere is nothing to sign up for.
No adsNone, free or paid.
No uploadFiles stay on your phone unless you save a backup.

Your gallery is not private.

Anyone holding your unlocked phone can scroll through it. VaultIt moves the photos out.

  1. 1

    Seal

    Pick photos and videos. VaultIt encrypts a copy on your phone. Nothing is uploaded.

  2. 2

    Check

    It opens the copy to prove it works, then asks Android to remove the original. You confirm.

  3. 3

    Open

    Draw your pattern. Files decrypt only while the vault is open and are wiped when you lock it.

What it does.

Real encryption

Every file and its thumbnail is sealed with AES-256, with a key made from your pattern. Not a hidden folder.

AES-256-GCM

Pattern, then fingerprint if you like

A 5 by 5 pattern of at least 8 dots opens it. Fingerprint unlock is optional and off by default.

5 × 5 dots

More vaults, and a decoy

Each vault has its own pattern. A decoy pattern opens a harmless vault if someone forces you to unlock.

1 pattern, 1 vault

A recovery phrase

Twelve words, shown once at setup. If you forget your pattern, they bring everything back.

12 words

Backups only you can read

One encrypted file, saved wherever you choose, Google Drive included. Restore it on a new phone with your 12 words.

.vaultbackup

Documents and camera too

Keep PDFs and scans next to your photos, or shoot photos and video straight into the vault.

any file type

How it is built.

Short version for people who check.

pattern to key
Argon2id, 64 MiB, 3 passes
sub-keys
HKDF-SHA256
files
AES-256-GCM, sealed one by one, thumbnails too
key slots
16. Unused ones are random bytes, so the file never shows how many vaults you have
recovery
12 words (BIP-39)
your files, keys
never leave the phone

If you lose your pattern and your 12 words, nobody can open your files. That includes us. There is no reset.

Someone takes your phone. Now what?

They try to open it

A wrong pattern gets nothing. The files are noise without it, as the demo above shows.

They make you open it

Draw the decoy pattern. It opens a separate vault with only what you put in it.

They look at recent apps

Turn on Block screenshots and VaultIt hides itself in the recents list too.

Free to start. Pay once to keep.

Free holds 2 vaults, 100 photos and 10 videos, with unlimited documents. Pro lifts the limits.

Pay once

Lifetime

$24.99

One payment. No subscription to forget.

7 days free

Yearly

$9.99 / year

Save 58% against paying monthly.

Cancel anytime

Monthly

$1.99 / month

The lightest way to try Pro.

If a plan ends, every file still opens.

Prices in US dollars; Google Play shows your local price. Subscriptions renew until cancelled and are managed in Google Play.

Questions.

What if I forget my pattern?

Use your 12-word recovery phrase and set a new pattern. If you have lost both, nobody can open the files, including us. We cannot reset it.

Can you see my files?

No. Files are encrypted on your phone with a key made from your pattern. We never receive the files or the key.

Do I need an account?

No. There is no sign-up and no email.

What if I stop paying?

Everything you stored stays yours and keeps opening. Free limits only stop you from adding more. You can always export or back up.

Where do my backups go?

Wherever you choose when you save: Google Drive, another app or this phone. The backup is one encrypted file, so Google Drive cannot read it. VaultIt tells you if you saved it on the phone only.

What does the decoy vault do?

It has its own pattern and opens a separate vault with only the files you put in it. It looks like a normal vault, so it can be handed over if you are forced.

Is there an iPhone version?

No. VaultIt is for Android 8 and up.

Do you collect data?

A few anonymous usage events, such as which screen you reached. Never your files, their names or your patterns.