Hide Photos & Videos: Vault

Private Vault is a zero-knowledge vault for your most sensitive photos, videos, and passwords. 🔒 Zero-knowledge by design - Every photo, video, and password is encrypted on your device with ChaCha20-Poly1305 (RFC 8439) - Encryption keys are derived from your PIN via Argon2id (64 MiB / 3 iterations / 4 parallelism — RFC 9106) - We never see your data. We don't have keys. We don't have servers holding your data. 📸 Photos & videos - Import from your photo library via Android's Photo Picker — no storage permission needed - Capture new photos and videos with the in-vault camera — photos never touch the system gallery - EXIF GPS coordinates can be stripped on import to protect your location - Encrypted video playback streams to RAM only — no plaintext ever written to disk 🗂️ Albums - Organize your photos, videos, and files into albums — with smart built-in Favorites, Photos, Videos, and Files albums - Create your own albums and nested sub-albums - Rename, pin to the top, set a custom cover, and sort by newest or oldest - Deleting an album never deletes your media 🔑 Passwords - Full-featured password manager for logins, passwords, and secure notes - Strong password generator with configurable length and character classes - Optional HIBP breach monitoring via k-anonymity: only 5 characters of your password's SHA-1 hash ever leave your device, and only if you opt in 🛡️ Hardware-backed security - Master Key wrapped in Android Keystore with BiometricPrompt authentication - StrongBox (Pixel 3+ / Titan M2 / Samsung Knox) used when available, TEE as fallback - Screen capture and screenshot blocked on every sensitive screen (FLAG_SECURE) - Auto-lock when backgrounded; configurable timeout; shake-to-lock 🔐 Biometric unlock - BiometricPrompt with BIOMETRIC_STRONG enforcement (Class 3 biometrics only) - PIN fallback always available - Forgot your PIN? Your Vault Key restores the vault without erasing anything — you hold the code, we never see it - Without a saved Vault Key, a forgotten PIN means full vault erase — no backdoor, no master key, no exception 🌐 Privacy you can verify - Zero analytics SDKs, zero ad SDKs, zero tracking — we never profile you - Crash diagnostics (Firebase Crashlytics) are on by default and can be switched off in Settings — they never include vault content, file names, or key material - The optional HIBP breach check sends only 5 characters of a hash — off by default - No account creation required, ever - Nothing you store is uploaded anywhere: your keys and your plaintext never leave the device 📲 System requirements - Android 10 (API 29) or later - Fingerprint, face, or iris biometric hardware optional — PIN-only mode fully supported Made by a small team that believes encryption keys belong to users, not vendors. Privacy Policy: https://ndlab.jp/private-vault/privacy Terms of Use: https://ndlab.jp/private-vault/terms