Is a vault app really encrypted?
Not always. Some vault apps only hide files behind a screen lock and leave them readable in storage. Ask four things: which cipher, where the key comes from, whether file names and thumbnails are encrypted, and whether the data leaves the phone. StrongRoom uses AES-256-GCM, with a separate key for each item.
Why
A lock screen and encryption are different. A lock screen decides who gets into the app. Encryption decides whether the stored bytes are readable without a key. An app can have the first and not the second, and from the outside the two look the same. The answers to four questions tell you which you have.
What to do
- Which cipher? Look for a named, published one, such as AES-256-GCM. A vague phrase tells you nothing.
- Where does the key come from? A key that comes from your credential or is held in the phone's hardware is one thing. A key stored next to the files is not protection.
- What stays readable? Ask about file names, thumbnails and the list of items. In StrongRoom the item, its thumbnail and the index of names and folders are encrypted, and file names on disk are random.
- Does it leave the phone? If an app offers cloud sync or an account, ask where the keys live. StrongRoom has no account and no cloud.
- Check for gaps. Ask what happens if you forget the credential; a vault that can always be reset by the company is not locked to you alone.
What this does not cover
Encryption protects stored data. It does not help if someone watches you unlock, knows your passcode, or if a copy is in Photos. StrongRoom also does not claim an outside review. Read the limits.
Frequently asked questions
Does StrongRoom choose a key per item?
Yes. Every item has its own key, and deleting the key erases the item.
Is "encrypted" enough?
No. The key's source, and what else stays readable, matter just as much.
Sources
No platform facts are stated on this page.