How to choose a photo vault app for iPhone
Choose a vault by what it lets you verify. It should name its cipher, need no account for local use, show a privacy label you can read, give you a way back in that does not depend on the company, and keep your files yours if you stop paying. Then test it yourself: put the phone in Airplane Mode and see what still works.
Read this first: what this guide is, and is not
This is a method, not a ranking. We did not test any other vault app for this guide, so we do not name any, score any, or say which one to buy. We give you the questions and the tests so you can run them on any app, including ours. StrongRoom is made by us, so treat our answers as claims to check, not as a verdict.
Decide what you are protecting from
"Safe" means nothing until you name the person or event you are guarding against. Different answers lead to different apps.
- A curious person with your unlocked phone. You need a separate lock on the vault and a blank app switcher. Almost any vault does this; the Hidden album in Photos does part of it.
- Someone who knows your phone passcode. A lock that is the same as your passcode adds nothing. You need a separate pattern or passphrase for the vault.
- A lost or stolen phone. You need real encryption, and you need a copy you control, because the vault goes with the phone.
- Someone who copies the app's files off the phone. This is where "encrypted" has to be true and the key must not be sitting next to the files.
- Pressure to open it. A vault cannot make this safe. Some apps offer a decoy or a Duress Vault; read the limits before you rely on one.
No app protects you from spyware, from a phone that is already compromised, or from someone watching you type. Any app that says otherwise is selling, not describing.
The ten checks
These are the same ten questions as our checklist page, with the reasoning and the tests laid out. Ten questions to ask any photo vault app
1. Is anything actually encrypted?
Some "vaults" put a passcode screen in front of ordinary files. The files are still ordinary files. A real vault says which cipher it uses and what it covers: the items, their thumbnails, their names and the list of what you have stored. Look for a named cipher and a plain description of where the key comes from. "Advanced protection" with no detail tells you nothing.
StrongRoom: AES-256-GCM, using the encryption built into iOS, for items, thumbnails and the index. Each item has its own key. The key is made from your pattern or passphrase together with a secret that stays inside the phone's Secure Enclave.
2. Does it need an account?
An account means a server that knows who you are. Some apps need one for a good reason, such as syncing. For a vault that keeps files on your phone, ask why. The test is simple: delete nothing, install the app, and see whether it asks for an email or a sign-in before you can store the first photo.
StrongRoom: No account, no email, no sign-up. Pro is bought through your Apple Account, which Apple handles.
3. Where do the files live?
A copy in the cloud is another place the files can be reached from. Read the app's privacy policy and settings for any "sync" or "back up to the cloud" switch, and find out whether it is on by default. Also ask whether the app's data is included in your iPhone's own device backups, because that is a second route off the phone.
StrongRoom: On the phone only. Its data is excluded from iCloud and computer backups, so nothing is copied off the phone unless you make an Export Package yourself. That is a real cost, covered in check 7.
4. What does the privacy label say?
Every app on the App Store carries a privacy section written by its developer. Apple's own support page explains that this information is self-reported by developers, so it is a declaration, not an inspection. It is still worth reading: an app that says it collects data linked to you has told you something, and an app whose label contradicts its own privacy policy has told you something else.
StrongRoom: It collects no data; its App Store privacy label will say Data Not Collected.
5. Does it send usage or crash reports?
Ask what leaves the phone when the app is working or when it breaks. A report sent after a crash can contain whatever the app chose to put in it, and you cannot see that from outside. Look in the privacy policy for any mention of diagnostics, advertising or third-party tools, and be wary of an app that mentions none of them and also gives no way to check.
StrongRoom: None. No ads, no tracking, and the app makes no network connections of its own.
6. What happens if you forget the credential?
A vault nobody can open is a trap. Find out the recovery route before you store anything: is there a recovery phrase, who holds it, and what is it worth if someone gets hold of it? A recovery route that depends on the company's server is also a route the company, or someone who breaks into it, can use.
StrongRoom: A 12-word Recovery Phrase, shown once. We keep no copy, so we cannot show it again. An optional Recovery PIN is easier to remember and easier to guess, works only on this phone and only from "Forgot?". If you lose both and forget your credential, the Vault is lost.
7. What happens if you lose the phone?
This is the commonest disaster, and the one marketing pages skip. If an app keeps nothing off the phone, a lost phone means lost files unless you made your own copy. If an app keeps a copy in the cloud, the copy exists, with the trade-offs in check 3. Neither is wrong; only silence is wrong.
StrongRoom: No copy is made for you. You make an Export Package, one encrypted file holding a whole Vault, and keep it somewhere safe. To restore it on a new iPhone you need the package and the Recovery Phrase.
8. Does it admit its limits?
A security claim with no limits is advertising. Look for a page that says what the app cannot do: what it cannot stop, what it cannot recover, what it cannot prove. If you cannot find one, ask yourself why.
StrongRoom: /security/limits/ lists them, including no outside review yet.
9. What does it charge for?
Paying for more room or more features is fair. Paying to get your own files back is not. Find out what happens to the items you have already stored if you stop paying or are over a free limit: can you still open them, export them, delete them? A vault that locks your files when a subscription lapses is holding them hostage.
StrongRoom: The free app has one Vault of up to 10 items. Pro adds unlimited items, more than one Vault and the Duress Vault. Recovery, export and the Empty Vault stay free, and anything already stored stays openable if you stop paying.
10. Has anyone outside checked it?
Self-assessment is not assurance. Look for a published report from an outside reviewer, or published source code that others can read. Absence of both is not proof of a problem, but it means you are relying on the developer's word.
StrongRoom: No outside expert has checked the app yet, and the source code is not published. We will say so on the site when that changes.
Score yourself
Count how many questions an app answers clearly and in a way you can check. If it cannot answer eight, keep looking. If our answers do not suit you, for example because you want automatic backup or a second device, choose an app that answers them differently and ask it the same ten.
How to test claims yourself
You do not have to take any of this on trust. These tests take a few minutes and apply to any app.
- Airplane Mode. Open Control Center and tap the Airplane Mode button, which Apple says turns off all radios except Bluetooth; you can switch Wi-Fi back on from Control Center if you want it. Then use the app: import something, open it, lock it, unlock it. A local vault should not need a network. This shows the app works offline, not that it never connects when you are online.
- App Privacy Report. In Settings > Privacy & Security, scroll down, tap App Privacy Report and turn it on. Apple says it then records, for the past 7 days, how often apps used sensitive data such as Photos and Camera, and which domains each app contacted. Use the app for a few days and look it up. A vault that contacts domains you did not expect deserves a question. It records domain names, not what was sent, so it cannot prove an app is clean.
- The privacy label. Read it on the store page before you install, then compare it with the privacy policy.
- Storage. In Settings > General > iPhone Storage, the app's size and its documents-and-data figure should grow when you add files. If you add a hundred photos and nothing changes, ask where they went.
- Ask for the way out. Import one test photo, then try to export it, and read what the app says about moving to a new phone. If you cannot find the way out in five minutes, that is your answer.
Red flags
- Superlatives instead of a cipher. "Unbreakable" or "100% safe" with no algorithm named.
- An account for local use. If the vault works only after you sign in, find out what is stored there.
- No limits page, no recovery explanation. If it says nothing about losing the phone or forgetting the credential, assume the answer is unwelcome.
- A subscription that holds files hostage. If your items lock when you stop paying, the app is renting you your own photos.
- Features that conflict with each other. A disguise icon says nothing about whether files are encrypted. See what a disguise does and does not do.
- A privacy label that does not match the policy.
Free versus paid
Free tiers are fine if you can see their edges. Check how many items fit, whether the limit counts photos, videos and documents together, whether the paid plan is a subscription or a one-time purchase, and what stops working if you stop paying. Also check whether the trial converts to a charge automatically, and where you manage it. Apple's page on refunds explains that you request one through reportaproblem.apple.com, and eligibility can vary by country or region. For what to check before paying, see the pay-once guide. Photo vault with no subscription: what to check before you pay
What to do before you import
- Read the answers to checks 6 and 7 first. Know how you would get back in and how you would move to a new phone before the first photo goes in.
- Write the recovery secret down on paper. Do not photograph it and do not leave it in the same phone.
- Import a few test files, not your whole library. Open them, lock the app, unlock it, and export one.
- Check what the app does with your originals. Importing copies a file in; the original usually stays in your photo library until you delete it, and Apple says deleted photos stay in Recently Deleted for 30 days. StrongRoom asks every time whether to delete the originals after an import.
- Make a copy you control. With StrongRoom that means an Export Package, kept somewhere other than the phone.
What to read next
If you are not sure that a vault is safe at all, start with the failures to look for. -> /guides/choosing-a-vault-app/are-photo-vault-apps-safe/ If you want to know what an app does with a file, read the step-by-step. -> /guides/choosing-a-vault-app/how-photo-vault-apps-work/ And for the no-account and no-cloud question in detail, see the offline guide. An offline photo vault for iPhone, with no account
Frequently asked questions
How do I choose a photo vault app?
Ask ten questions: is it encrypted and with what, does it need an account, where do files live, what does the privacy label say, what is sent from the phone, how do you recover, what if you lose the phone, does it state its limits, what does it charge for, and has anyone outside checked it. Then test it in Airplane Mode.
Which is the safest photo vault app?
We cannot rank apps and we did not test others for this guide. No app is immune to attack. Prefer the one whose claims you can check and whose limits are written down.
Is a free vault enough?
It can be, if you know the limit and what happens to your items if you stop paying. StrongRoom's free app has one Vault of up to 10 items.
How do I know my vault app is really encrypted?
Look for a named cipher and a description of what it covers. You cannot prove encryption from outside, so also read the limits page and the recovery explanation.
Do I need a vault app at all?
For casual privacy the Hidden album may do. It locks the album but does not encrypt it separately. Read more: Hidden album or vault app?
Sources
- About App Privacy Report (Apple Support), checked on 2026-10-30.
- About privacy information on the App Store and the choices you have to control your data (Apple Support), checked on 2026-10-30.
- Use Airplane Mode on your iPhone, iPad, Apple Watch, and Apple Vision Pro (Apple Support), checked on 2026-10-30.
- How to check the storage on your iPhone and iPad (Apple Support), checked on 2026-10-30.
- Delete photos on your iPhone or iPad (Apple Support), checked on 2026-10-30.
- Request a refund for apps or content that you bought from Apple (Apple Support), checked on 2026-10-30.