What happens to your Vault if you lose your iPhone?

If you made an Export Package, restore it on a new iPhone with the Recovery Phrase. If you did not, the data is gone: StrongRoom keeps nothing anywhere else. Whoever finds the phone still faces the lock, the guess limit and a key tied to that phone's Secure Enclave. Separately, use Apple's steps for a lost or stolen iPhone.

The two questions are separate

Losing a phone raises two worries that have different answers. Can I get my photos back? And can someone else see them? The first depends on what you saved before. The second depends on how the Vault was locked.

Can you get the Vault back

What you haveResult
An Export Package and the Recovery PhraseRestore on a new iPhone. You get the Vault as it was when you made the package.
An Export Package, no phraseThe package cannot be opened by anyone.
The phrase, no packageNothing to restore. The phrase works together with a secret inside the lost phone.
NeitherThe Vault is gone. We cannot recover it.

Restoring is covered step by step in how to transfer a Vault to a new iPhone How to transfer a photo vault to a new iPhone

What a thief can and cannot do

We do not promise safety; here is what the design does. The files are encrypted on the phone. The key is made from your pattern or passphrase together with a secret inside the Secure Enclave, so copying the app's files to another device gives nothing. Guessing is slowed: after ten attempts in five minutes, each further attempt waits longer, up to an hour. Leaving the app locks it at once.

What the design cannot do: stop someone who watched you draw your pattern or who knows your passphrase, stop anyone while the Vault is unlocked on a screen, or defend a phone that has spyware or has been tampered with. A short pattern is easier to guess than a passphrase, so use a passphrase if the risk is serious. See what StrongRoom does not protect against

What to do straight away

These are Apple's steps, not ours, and they are for the phone as a whole.

  1. Mark the phone as lost in Find My, through iCloud.com/find or another Apple device. Apple says this puts the device in Lost Mode, which locks it with a passcode or your Apple Account password.
  2. Report a theft to local law enforcement. They may ask for the serial number, which you can find without the phone.
  3. Contact your carrier and ask them to suspend the service.
  4. Change your Apple Account password.
  5. Think before you erase. Apple notes that erasing a device cannot be undone. If you are certain you will not get the phone back and you have an Export Package, an erase is a reasonable choice; if not, wait. Apple also advises keeping the device in Find My after an erase, because removing it disables Activation Lock.

These steps protect the device and your accounts. They cannot restore a Vault.

When you get a new phone

  1. Install StrongRoom. Do not create a Vault.
  2. Choose Restore from an Export Package on the first screen.
  3. Choose the package and type the Vault's phrase.
  4. Set a new pattern or passphrase.

Set a new Recovery PIN if you want one; it is not in the package. If you had a Duress Vault, restore the Vaults one by one, because each has its own package.

Do this before it happens

  • Make an Export Package for every Vault you value, and keep copies off the phone Export Package: your Vault as one encrypted file
  • Keep the Recovery Phrase on paper, away from the phone.
  • Use a passphrase for a Vault that matters.
  • Check that Find My is set up on your iPhone.

For the short version: what happens to my Vault if I lose my phone

Frequently asked questions

Can a thief open my Vault?

Not by copying files; the key is tied to the phone's Secure Enclave. Guessing is slowed but not impossible. If they know your pattern or passphrase, nothing stops them while they hold the phone.

I lost my phone. Can StrongRoom restore my photos?

Only from an Export Package you made earlier, with the Recovery Phrase. We hold no copy.

Should I erase the phone remotely?

That is your call; Apple warns it cannot be undone. Make sure you have what you need first.

Does a Duress Vault help if the phone is lost?

It acts only when it is opened. It does not wipe a lost phone by itself.

Sources

StrongRoom is a free iPhone app, coming to the App Store.

Free for iPhone. Pro is optional. What Pro changes.

Coming to the App Store. See what version 1.0 includes.