What is zero-knowledge encryption?
Zero-knowledge means the service cannot read what you store, because it never holds the key. For an app that makes no network connections of its own, the claim is simpler: there is no service to trust. You can check by reading the label, the policy and how the app behaves in Airplane Mode, though each check has limits.
What the phrase means
"Zero-knowledge" is used for two related ideas, and vendors blur them.
- Zero-knowledge storage. A company stores your encrypted data but does not hold the key. The key is made on your device, from something only you know. The company can hand over the scrambled data and cannot read it.
- Zero-knowledge proofs. A different idea from cryptography: proving you know something without revealing it. It sits behind some login systems. It is not the same thing as encrypted storage.
When a vault or cloud app says "zero-knowledge", it usually means the first. The claim has a catch: it is only as strong as the app's honesty and design. A company cannot read what it cannot decrypt, but it may still see who you are, when you connect, how much you store and which files are which size.
What it costs you
Because the provider cannot read your data, it also cannot help when you forget the key. That is not a flaw; it follows from the design. A service that can reset your access to your data holds a way in. StrongRoom is built the same way: we cannot recover your data, reset your pattern or passphrase, or unlock a Vault. A Recovery Phrase and an Export Package are yours to keep.
How to check the claim
No page can prove it, including this one. These checks narrow it down.
- Read the plain statement. Look for a sentence that says who holds the keys. "We hold no keys" is a statement you can hold the company to. "Bank-level security" is not.
- Read the privacy policy. It should list what is sent off the phone. Compare it with the App Store privacy details. Apple's documentation says the developer provides those details and is responsible for keeping them accurate, so they are a declaration, not an inspection.
- Look for an account. If the app asks for an email or sign-up before it can store anything, a server is part of the system, and you need to know what it can see.
- Try Airplane Mode. Turn it on and use the app. If everything still works, the app does not need a network for its main job. This shows the app can work offline. It does not prove the app never uses a network when one is available, so read it together with the policy.
- Ask what happens if you forget the key. If the company can restore your data for you, it can read it.
How a no-network app goes further
A zero-knowledge cloud service asks you to trust that the key stays with you and that the software on both ends does what it says. An app with no network connections of its own removes the second half of that trust: there is no server holding your data, no account and no connection through which a key could leave.
That is the position StrongRoom takes. The app makes no network connections of its own; your Vault stays on your phone, and the policy says we collect, receive, store or share nothing about you or your content. We prefer to say "nothing leaves your phone" over "zero-knowledge", because it is a plainer and more checkable claim. We hold no keys and receive no data.
One exception is worth naming: StrongRoom Pro is bought through Apple, and Apple handles that purchase. Apple's service sees the purchase, not your Vault.
What it does not cover
- Your phone. Nothing about zero-knowledge protects an unlocked Vault from someone looking at the screen, or a phone with spyware on it.
- What you send. A file you export or share as an ordinary file is no longer protected. A Share Package is encrypted, but you send it, and the person who has the file and the words or QR code can open it.
- Your own copy. With no copy elsewhere, losing the phone loses the Vault unless you have an Export Package.
No outside expert has checked StrongRoom yet, so treat all of this as our description, not a verified finding.
Keep reading
- Does a photo vault really encrypt your files?
- End-to-end encryption for photos
- Private by design: no account, no network
- Does StrongRoom work offline?
- What StrongRoom does not protect against
Frequently asked questions
Is zero-knowledge the same as end-to-end encrypted?
They overlap. Both mean the provider cannot read your data. End-to-end encryption describes data moving between people or devices; zero-knowledge usually describes storage.
Is StrongRoom zero-knowledge?
We hold no keys and receive no data, and the app makes no network connections of its own. We prefer to say that nothing leaves your phone.
Does Airplane Mode prove an app is private?
No. It shows the app can work without a network. Read the policy as well.
Can you recover my Vault if I forget everything?
No. With neither your credential nor your Recovery Phrase, nobody can open it.
Sources
- App privacy details on the App Store (Apple Developer), checked on 2026-10-30.